DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4d04ec3ccf213ce083505b526cef11c1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
4d04ec3ccf213ce083505b526cef11c1_JaffaCakes118
Size
72KB
MD5
4d04ec3ccf213ce083505b526cef11c1
SHA1
0cffbbc85412561beb02db680b27a35f63dec809
SHA256
47586359f0a1b01978e6789ac5b6625cc8690b8578276210141479965582b917
SHA512
65ddea9d4c76be994928ff127ed1b5605193ab1c7884c9dc30719d5c0ec1fd8ae0c2f5a699010ab87c3d0ac2c0fe06af356563959a9014df32338f212ba74b54
SSDEEP
768:P1FCiPbXWPQfCtf6xdZ9Finr+LT/MOdbXhWW68gpK7E1uoVdYzZect9mgg:P1FC8XRUr+LTEOhWW68PPofuZect9A
Checks for missing Authenticode signature.
resource |
---|
4d04ec3ccf213ce083505b526cef11c1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
CloseHandle
WideCharToMultiByte
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
lstrcpyA
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
LCMapStringA
LCMapStringW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetStringTypeA
GetStringTypeW
SetFilePointer
GetWindowTextA
SetWindowTextA
FindWindowExA
SysAllocStringLen
VariantClear
VariantCopy
VariantChangeType
SysStringLen
LoadRegTypeLi
SysFreeString
ord30
ord58
ord32
ord18
ord15
ord16
ord21
ord57
ord23
ord31
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ