DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
68889a25bdb6e40c347f5c3b168f8582_JaffaCakes118.dll
Resource
win7-20240705-en
Target
68889a25bdb6e40c347f5c3b168f8582_JaffaCakes118
Size
2.5MB
MD5
68889a25bdb6e40c347f5c3b168f8582
SHA1
c855dbd2f7e14ba37c9078829e9ccf4891df5c7b
SHA256
85dd791c40037d7f20e230c804ffbbebb49335a90de28afa7e5b1291806c7152
SHA512
95aadc91cae4bea848f3f005edb7950f4799964fbf49e0a75e166d41796d13b717dc9e38aeb5380b63cc2c6ed0ca1554b0f1892f202c51863beebea52b7f9b9f
SSDEEP
24576:PHlItVZSTbQPU6LOil01RNFeCwt5JTWZ3V5otr1DD8YZlQ+Xwy6MB9YlKkIeH+T/:PrDy5rteYZlLAqLeKkZH+T/BISFlv
Checks for missing Authenticode signature.
resource |
---|
68889a25bdb6e40c347f5c3b168f8582_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
MultiByteToWideChar
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetStdHandle
WideCharToMultiByte
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
IsValidLocale
LoadLibraryW
GetLastError
HeapFree
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
CloseHandle
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetFullPathNameA
GetCurrentDirectoryA
GetTimeZoneInformation
GetFullPathNameW
GetLocaleInfoA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
SetEnvironmentVariableA
IsWindow
SysStringLen
SysFreeString
SysAllocString
VariantClear
VariantInit
UrlMkSetSessionOption
SHGetFileInfoW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ