DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
69f996e103c0f6126bd6e40c5aa6309b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
69f996e103c0f6126bd6e40c5aa6309b_JaffaCakes118
Size
274KB
MD5
69f996e103c0f6126bd6e40c5aa6309b
SHA1
86069f65c6859198f8bc84e96d38572992251152
SHA256
e2a580dbe6339a355859fb028c01804b8176f0931913296e0451ee068fafdb77
SHA512
8c5556f4f62cb12a187b55a2f9d331330718060c1e211b0544ba990f1922ed091bb0477fc48fb60721cdb371da21fc24ebb9ce3c1760ee2176ed52e29e439aa7
SSDEEP
6144:FUwYrfFdgqH5Xl/gFLz7lOujrj9tCGDnb:WwUF+qHH/1ujrj97
Checks for missing Authenticode signature.
resource |
---|
69f996e103c0f6126bd6e40c5aa6309b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
InitializeCriticalSection
LeaveCriticalSection
lstrcmpiW
LockResource
GetThreadLocale
SetThreadLocale
MultiByteToWideChar
UpdateResourceW
EndUpdateResourceW
lstrlenA
GetTickCount
GetExitCodeThread
Sleep
TerminateThread
CloseHandle
EnterCriticalSection
DeleteCriticalSection
GetModuleFileNameW
RaiseException
GetLastError
WideCharToMultiByte
lstrlenW
FreeLibrary
GetProcAddress
BeginUpdateResourceW
LoadLibraryW
GetLocaleInfoA
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnregisterClassA
MessageBoxW
PostMessageW
CharNextW
IsTextUnicode
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
CoTaskMemFree
CoGetClassObject
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
RegisterTypeLi
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysFreeString
VarUI4FromStr
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VarBstrCmp
VariantClear
SysAllocStringLen
VarBstrCat
UnRegisterTypeLi
NdrStubForwardingFunction
NdrOleAllocate
NdrDllRegisterProxy
NdrDllCanUnloadNow
IUnknown_Release_Proxy
NdrCStdStubBuffer2_Release
IUnknown_AddRef_Proxy
NdrDllGetClassObject
NdrDllUnregisterProxy
IUnknown_QueryInterface_Proxy
NdrOleFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ