DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
66816ac51ffb154a0bd8e112f554e0db_JaffaCakes118.dll
Resource
win7-20240704-en
Target
66816ac51ffb154a0bd8e112f554e0db_JaffaCakes118
Size
324KB
MD5
66816ac51ffb154a0bd8e112f554e0db
SHA1
069f33d2c067b441a52b882e44fc34b6881f0db5
SHA256
c4c8b01eabc9bfe1362c8dfd48502db49c21dddca5c5dfd1b60723d019978448
SHA512
904e3d3e6319a498689eb19b7531d59ab540d68d80ff391349f5e60839e3f3a954649ad9509b2cdc2307700c1ffc722e38850e27a143fd0d488d04ab65afcb0d
SSDEEP
6144:kjoKJxDPuiumLLjCUFMvfXqzO4iHdHSfnpt:sfruNmrFMnXIlI2
Checks for missing Authenticode signature.
resource |
---|
66816ac51ffb154a0bd8e112f554e0db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
SizeofResource
LoadResource
GetLastError
FindResourceW
LoadLibraryExW
GetModuleFileNameW
EnterCriticalSection
RaiseException
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiW
LeaveCriticalSection
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileA
SetEndOfFile
HeapAlloc
lstrlenW
FormatMessageW
HeapFree
GetProcessHeap
GlobalAlloc
Sleep
FreeLibrary
CreateThread
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileW
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
LoadLibraryA
GetStringTypeW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapReAlloc
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapSize
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
LCMapStringW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointer
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetStringTypeA
MessageBoxW
CharNextW
UnregisterClassA
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegCloseKey
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
UnRegisterTypeLi
SysAllocString
VariantClear
VariantInit
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ