DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5fb85cc01066e45fd1e1dded6a4e8a4e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
5fb85cc01066e45fd1e1dded6a4e8a4e_JaffaCakes118
Size
316KB
MD5
5fb85cc01066e45fd1e1dded6a4e8a4e
SHA1
5e2bc3102447e3db75b811d1830da7330223d164
SHA256
9d13fef337a7570d3fcc356b2b2438934fc2e003eac63292c822c3953839c267
SHA512
98894c6f53eefae13892408f743048496c5b869b31ca0f8cf6aff6d95a1f3f0589f39e874944dab19173e3fa552cc143e4c48f3ca5117822b4133e3ebd064091
SSDEEP
6144:Esf4gitY5tecWw4cQuLmQbgvPx8eRCnJI9yt+QDMZ:Jck4cQuLYNRdkHgZ
Checks for missing Authenticode signature.
resource |
---|
5fb85cc01066e45fd1e1dded6a4e8a4e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryExW
GetModuleHandleW
RaiseException
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
LockResource
GetThreadLocale
SetThreadLocale
FindResourceW
UpdateResourceW
EndUpdateResourceW
lstrlenA
GetTickCount
GetExitCodeThread
Sleep
TerminateThread
CloseHandle
LoadResource
SizeofResource
MultiByteToWideChar
lstrcmpiW
GetLastError
WideCharToMultiByte
lstrlenW
GetProcAddress
LoadLibraryW
BeginUpdateResourceW
FreeLibrary
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
LoadLibraryA
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
VirtualAlloc
VirtualFree
HeapFree
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetVersionExA
GetProcessHeap
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapDestroy
HeapCreate
UnregisterClassA
MessageBoxW
PostMessageW
CharNextW
IsTextUnicode
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
CoTaskMemFree
CoGetClassObject
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
UnRegisterTypeLi
VarUI4FromStr
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VarBstrCmp
SysStringLen
SysFreeString
LoadRegTypeLi
LoadTypeLi
SysAllocStringLen
VarBstrCat
VariantClear
RegisterTypeLi
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrStubForwardingFunction
NdrOleAllocate
NdrDllRegisterProxy
NdrDllCanUnloadNow
IUnknown_Release_Proxy
NdrCStdStubBuffer2_Release
IUnknown_AddRef_Proxy
NdrDllGetClassObject
NdrDllUnregisterProxy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ