DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
42f52cde80e67df46b73ff613e42feb1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
42f52cde80e67df46b73ff613e42feb1_JaffaCakes118
Size
338KB
MD5
42f52cde80e67df46b73ff613e42feb1
SHA1
c3534ab481cf13c7a21828a87a1c83b2603412ec
SHA256
3aa2dc89d56842f3be287d7abc82b59c9ccca37cbb4653d8ddaf8725272592d2
SHA512
041e607feaea466212e2857cc440be70e95782d01e35a42317008230d5d23e1f128b48d480830fc54530ac517a12a815e6800d4cedb9a7abc250a2874a2b5f96
SSDEEP
6144:ONsNJGvSndudVmSHqsUn6k/fuD3ZK5+V7jZOnIR5/PlnKr:AaGvShgqsU6kuDE50jon87K
Checks for missing Authenticode signature.
resource |
---|
42f52cde80e67df46b73ff613e42feb1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetModuleHandleW
SizeofResource
LoadResource
FindResourceW
IsBadCodePtr
InterlockedDecrement
DisableThreadLibraryCalls
CreateEventW
CloseHandle
ResetEvent
WaitForSingleObject
SetEvent
GetLastError
InterlockedIncrement
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
lstrlenW
lstrcmpiW
LoadLibraryExW
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
RtlUnwind
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
HeapSize
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetOEMCP
IsValidCodePage
UnregisterClassA
CharNextW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
VarUI4FromStr
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE