DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
454274eb3883e37d1aec94d79d96250f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
454274eb3883e37d1aec94d79d96250f_JaffaCakes118
Size
314KB
MD5
454274eb3883e37d1aec94d79d96250f
SHA1
c5d63d87f5c6445853ff8088a20baad64f4c769b
SHA256
6340b04da2d799e45e1a9fcc7b5362ab5baac80eb7b5bc39cb0e7996bdba4f60
SHA512
db9af47c11f348f4ad5fcda4a01500bd9ed5ce700573e5b608c609ffbbae30e7a98ee2a45bc28797fa765a94b82c71afb6af62a0b8c0763277371156eab01b66
SSDEEP
6144:jVdGF+PqD0H3Vs0OJYSp5fxzXkkLtW9WZ5+:jKIqgKJV5ZDkk5
Checks for missing Authenticode signature.
resource |
---|
454274eb3883e37d1aec94d79d96250f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
InitializeCriticalSection
LeaveCriticalSection
lstrcmpiW
LockResource
GetThreadLocale
SetThreadLocale
MultiByteToWideChar
UpdateResourceW
EndUpdateResourceW
lstrlenA
GetTickCount
GetExitCodeThread
Sleep
TerminateThread
CloseHandle
EnterCriticalSection
DeleteCriticalSection
GetModuleFileNameW
RaiseException
GetLastError
WideCharToMultiByte
lstrlenW
FreeLibrary
GetProcAddress
BeginUpdateResourceW
LoadLibraryW
GetLocaleInfoA
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnregisterClassA
MessageBoxW
PostMessageW
CharNextW
IsTextUnicode
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
CoTaskMemFree
CoGetClassObject
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
RegisterTypeLi
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysFreeString
VarUI4FromStr
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VarBstrCmp
VariantClear
SysAllocStringLen
VarBstrCat
UnRegisterTypeLi
NdrOleAllocate
NdrDllRegisterProxy
NdrDllCanUnloadNow
IUnknown_Release_Proxy
NdrCStdStubBuffer2_Release
IUnknown_AddRef_Proxy
NdrDllGetClassObject
NdrDllUnregisterProxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrStubForwardingFunction
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ