DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
466e1b5633c771b4e1abe055b8bb553c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
466e1b5633c771b4e1abe055b8bb553c_JaffaCakes118
Size
116KB
MD5
466e1b5633c771b4e1abe055b8bb553c
SHA1
2548f980aadc42974ab765c133f9295a052d7e68
SHA256
95f1e2c9ec07022ec62794c717c2af792f8e8bf252f4420e76db2ff4d2abc76d
SHA512
e34e27acc6494d701537a3c5bca711ad0830a21300fb89a89b233f05853065dd3676eb2b9016f81e5b9255049e29a72aa24001ebf0efbb535e085bc4006fabc5
SSDEEP
1536:Fr4jfzLZjmEJjjzEL8/IgdVoaXGsKVdrvSHu6h4A7Tj/bZ4R5cgzH2wYUtDLokEh:FrkvZjmwmlKb7d5wYUtDLokbP0
Checks for missing Authenticode signature.
resource |
---|
466e1b5633c771b4e1abe055b8bb553c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
CreateThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
lstrlenA
GetShortPathNameA
FreeLibrary
GetProcAddress
GetModuleFileNameA
lstrcatA
GetWindowsDirectoryA
CloseHandle
CreateFileA
GetTempFileNameA
GetTempPathA
SetFileTime
GetFileTime
WideCharToMultiByte
lstrlenW
lstrcpyA
LoadLibraryA
MultiByteToWideChar
RtlUnwind
SetEndOfFile
SetFilePointer
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
GetLastError
LocalFree
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
GetModuleHandleA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapCreate
VirtualFree
ExitProcess
VirtualAlloc
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapSize
SetUnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
ReadFile
GetCPInfo
GetACP
GetOEMCP
CharNextA
GetMessageA
MessageBoxA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
CoCreateInstance
VariantClear
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayDestroy
SysAllocStringLen
SysFreeString
SysAllocString
DeleteUrlCacheEntry
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ