DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
49aeafcdfb7f6fe6a2f217edb2f5b799_JaffaCakes118.dll
Resource
win7-20240705-en
Target
49aeafcdfb7f6fe6a2f217edb2f5b799_JaffaCakes118
Size
80KB
MD5
49aeafcdfb7f6fe6a2f217edb2f5b799
SHA1
5f6425c8bbfe2b0367f8c534f38d480238886a6b
SHA256
30c1aa88d04df00bba4d898c4096936540eaaa657ad6619d1081fb0ea519f8f8
SHA512
f36ef8884a5fc6d19e61fec1403ab9f97c958eb1d1fe11d79587c66560b8d9f3febc7c73657f6bed9a8bb59a07b5955cb30dc018f2e40c41e2217bc8d4a33894
SSDEEP
768:xLy5nvEYZd2tJNnPHRUyOxXJhH47ET4PJbFe/fbwuJusUiqULIUR+Z:xqvEY4HRUysZWET4SXkuJusNqsIfZ
Checks for missing Authenticode signature.
resource |
---|
49aeafcdfb7f6fe6a2f217edb2f5b799_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
DisableThreadLibraryCalls
InitializeCriticalSection
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetShortPathNameA
MultiByteToWideChar
lstrlenW
InterlockedIncrement
lstrcatA
GetFileAttributesA
OutputDebugStringA
DebugBreak
lstrlenA
InterlockedDecrement
HeapDestroy
lstrcpyA
IsBadCodePtr
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
SetUnhandledExceptionFilter
HeapSize
LocalFree
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
RaiseException
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
RtlUnwind
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
WriteFile
LoadStringA
PostMessageA
GetWindowLongA
FindWindowExA
wvsprintfA
CharNextA
wsprintfA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
SHGetFolderPathA
SHGetSpecialFolderPathA
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
SysStringLen
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VarUI4FromStr
SysAllocString
SysFreeString
VariantClear
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ