DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
64c61872b4c097dfeafd1a648e8d96b8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
64c61872b4c097dfeafd1a648e8d96b8_JaffaCakes118
Size
228KB
MD5
64c61872b4c097dfeafd1a648e8d96b8
SHA1
8610d3379e971178f282d8691165ecce54e47f0a
SHA256
2f64110a697616aa5aeac37b3936f7a92a8cfcdf6610798be69519b88e467472
SHA512
c918e4e47e778447f047c71432db1d127980ed596ea9e9150dd422dba0c327213eef19128413ac7f475675295b083284d36bd8846f9a7afa85c166a71dbe56e5
SSDEEP
3072:Ne/f/2VcmF56TJnDrRmQjNO/VXTTL2/Wy38EkDteyk155IeToCp8/K445KrK3vOK:N6XgcBtnRnNOpuxRMeyQUw0vW7
Checks for missing Authenticode signature.
resource |
---|
64c61872b4c097dfeafd1a648e8d96b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMemoryResourceNotification
FlushFileBuffers
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
lstrlenA
lstrcmpiA
lstrlenW
lstrcpyA
GetModuleHandleA
GetModuleFileNameA
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
Sleep
GetTickCount
lstrcatA
HeapFree
GetProcessHeap
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetCurrentThreadId
GetEnvironmentVariableA
CloseHandle
ResumeThread
WaitForSingleObject
CreateThread
SetEnvironmentVariableA
FreeLibrary
GetProcAddress
LoadLibraryA
GetLargestConsoleWindowSize
GetHandleInformation
GetGeoInfoW
GetGeoInfoA
GetFullPathNameW
GetFullPathNameA
GetFirmwareEnvironmentVariableW
GetFirmwareEnvironmentVariableA
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesExA
GetFileAttributesW
GetFileAttributesA
FileTimeToLocalFileTime
GetSystemInfo
GetComputerNameA
IsBadReadPtr
WriteProfileSectionA
EscapeCommFunction
ReleaseMutex
SetEvent
ResetEvent
CreateMutexA
CreateEventA
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpA
GetVolumeInformationA
LocalAlloc
LocalFree
HeapDestroy
HeapReAlloc
HeapSize
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
VirtualQuery
GetCommandLineA
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetFilePointer
SetStdHandle
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ