DllMain
DllRegisterServer
DllUnregisterServer
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
6f83b9c571fddd5193d09abfbd7b3ca6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f83b9c571fddd5193d09abfbd7b3ca6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f83b9c571fddd5193d09abfbd7b3ca6_JaffaCakes118
Size
80KB
MD5
6f83b9c571fddd5193d09abfbd7b3ca6
SHA1
21a62c96d857c55a7cb5f2be3123c72ce3380ca5
SHA256
dbec33c5b03b0e977cfa9a9a455ca3a19a4d123c10ff0eeb80ab7fdb2486dbf0
SHA512
9da66f2d079d82319bc037f46e99f54ba0249be25eeaf032c98257dfde4796a324151b8167974189bd38b4719ca2a2268ebf3ce4d5913b4cde593b7f121fb969
SSDEEP
1536:jbRrqhFpMBhRL26qYSuoSHKrBX4kjk+T6+fIRHJF6Esx0lfsMzGPrm:fU7ShRiTK4PyL6EBlUMz2rm
Checks for missing Authenticode signature.
resource |
---|
6f83b9c571fddd5193d09abfbd7b3ca6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
WriteFile
CreateFileA
DeleteFileA
CreateDirectoryA
Sleep
GetTickCount
GetEnvironmentVariableA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GlobalFree
FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenW
lstrlenA
HeapAlloc
GetProcessHeap
HeapDestroy
HeapFree
TerminateThread
GetCurrentThread
SetUnhandledExceptionFilter
GetModuleFileNameA
LoadLibraryW
ExpandEnvironmentStringsW
HeapCreate
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
VirtualQuery
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetCPInfo
VirtualProtect
GetSystemInfo
GetStringTypeA
GetStringTypeW
wsprintfA
WSCInstallProvider
WSCEnumProtocols
ntohs
inet_ntoa
WSCGetProviderPath
UuidCreate
DllMain
DllRegisterServer
DllUnregisterServer
WSPStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ