DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6afcf857a1c554b452e6a4425b8cba5f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6afcf857a1c554b452e6a4425b8cba5f_JaffaCakes118
Size
188KB
MD5
6afcf857a1c554b452e6a4425b8cba5f
SHA1
6bc8ebc5e61c60cc9f580093145ca3533413bb23
SHA256
43d41c75a18f8c8e131996af39b0ddbbbde1da85702fd5b3358273c10c7802a1
SHA512
7762c9662b23fa7eb4c6111ba741ad78f379751e28f6140dec0b97d842999c2f1667a6c48054fb9c846f1bf9e4c0a05e2ff9c589e34a091dc4db98df7c7870b5
SSDEEP
1536:V8j28croTLO5+dyGLlN+nMvbOQjQ948SbKvDz2i76jg650YtbITLq5fLUvwkqGlp:PQNjm6jg65ztYvzPpOF5CSvSogH
Checks for missing Authenticode signature.
resource |
---|
6afcf857a1c554b452e6a4425b8cba5f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
CreateThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
lstrlenA
GetShortPathNameA
FreeLibrary
GetProcAddress
GetModuleFileNameA
lstrcatA
GetWindowsDirectoryA
CloseHandle
CreateFileA
GetTempFileNameA
GetTempPathA
SetFileTime
GetFileTime
WideCharToMultiByte
lstrlenW
lstrcpyA
LoadLibraryA
MultiByteToWideChar
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetEndOfFile
SetFilePointer
IsBadCodePtr
GetOEMCP
GetLastError
LocalFree
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapCreate
VirtualFree
ExitProcess
VirtualAlloc
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapSize
SetUnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
ReadFile
GetCPInfo
GetACP
CharNextA
MessageBoxA
GetMessageA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
CoCreateInstance
SysAllocString
SysFreeString
SysAllocStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayDestroy
VariantClear
DeleteUrlCacheEntry
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ