DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
49b27db4815e3d15863139fcd61eeb9c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
49b27db4815e3d15863139fcd61eeb9c_JaffaCakes118
Size
1.3MB
MD5
49b27db4815e3d15863139fcd61eeb9c
SHA1
283a0d39f9b724134cd664fcb19798f3bf2a76d3
SHA256
19377ca3dafedd5b2e5a1370398ba7c1d2a50bd624db78d9936413ff4f21b471
SHA512
e4555eb82f3014249216354ff55092df0ec3ae358ec99dc912f6e0d1e3be487da8414c71f895ea2d428637147fa49737a15072b6fd8eb565b541f8ac996b45ce
SSDEEP
24576:lryzgtzENmu6H8zifGW+CfsIy6UcceRAflLDY4vAb3LZ3SwCJsd7C909FJEergUL:lr2gBHee8RIb5h40cGiQP1
Checks for missing Authenticode signature.
resource |
---|
49b27db4815e3d15863139fcd61eeb9c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CLSIDFromProgID
CreateStreamOnHGlobal
CoTaskMemFree
CreateBindCtx
CoCreateFreeThreadedMarshaler
StringFromCLSID
CoTaskMemAlloc
CoCreateInstance
ord44
ord45
ord28
ord311
ord310
StrCpyW
StrCatW
ord158
ord156
PathIsURLW
PathSearchAndQualifyW
UrlCreateFromPathW
UrlUnescapeW
PathCreateFromUrlW
PathIsRelativeW
UrlGetLocationW
UrlCanonicalizeW
ord52
UrlIsW
ord66
ord29
ord38
StrToIntW
StrCmpNIW
StrCmpNW
StrCmpW
ord15
ord115
LeaveCriticalSection
LocalAlloc
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
RtlUnwind
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
ExitProcess
VirtualProtect
GetCommandLineA
GetCPInfo
GetModuleHandleW
GetDateFormatW
GetTimeFormatW
GetThreadLocale
DebugBreak
GetProcAddress
LoadLibraryA
FreeLibrary
lstrcmpA
MultiByteToWideChar
ExpandEnvironmentStringsA
TlsGetValue
lstrcpyA
GetModuleFileNameA
OutputDebugStringA
InterlockedDecrement
InterlockedIncrement
HeapFree
HeapSize
HeapAlloc
HeapReAlloc
VirtualFree
VirtualAlloc
GetProcessHeap
TlsSetValue
CloseHandle
GetCurrentThreadId
DuplicateHandle
GetCurrentThread
GetCurrentProcess
GetModuleHandleA
GetVersionExA
TlsAlloc
TlsFree
InitializeCriticalSection
WaitForSingleObject
GetTickCount
ReleaseSemaphore
InterlockedExchange
DeleteCriticalSection
EnterCriticalSection
CreateSemaphoreA
CreateEventA
Sleep
GetExitCodeThread
VirtualQuery
GetThreadContext
ResumeThread
SuspendThread
SetEvent
ResetEvent
HeapDestroy
GetLastError
HeapCreate
GetSystemInfo
SetLastError
RaiseException
WideCharToMultiByte
LoadResource
FormatMessageA
FormatMessageW
LoadLibraryExA
FileTimeToSystemTime
SystemTimeToFileTime
WriteFile
SetFilePointer
GetFileType
FlushFileBuffers
ReadFile
SetEndOfFile
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE