DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
82259b28d7f1c5dd4ed4c6c51cb73bb1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
82259b28d7f1c5dd4ed4c6c51cb73bb1_JaffaCakes118
Size
216KB
MD5
82259b28d7f1c5dd4ed4c6c51cb73bb1
SHA1
49bfa40217c0bf0550a667edf66e7ed85802d10a
SHA256
525fa5502b0bbbb8477cb2cc4756e400b23eaf4b02f08e09b86ba396bdfb0095
SHA512
72f6af724f4e697e45f40c1c06dce4a4faea13059769951684ac5513e04e462c3c37ad27b49a40c29f738cbab97e60f466dc65874913af2e2c0e3900ac6c61d7
SSDEEP
3072:g/gml/gjXZzFQ/OtA8XIuS6kCRVHLZssDQAKIWJYI4ExrXut5:0Nl/gjbQ2tA4qqRVbn1dSju
Checks for missing Authenticode signature.
resource |
---|
82259b28d7f1c5dd4ed4c6c51cb73bb1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
DisableThreadLibraryCalls
GetModuleFileNameW
RaiseException
GetLastError
EnterCriticalSection
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileA
SetEndOfFile
InterlockedDecrement
InterlockedIncrement
GlobalAlloc
Sleep
CreateThread
LocalAlloc
lstrlenW
FormatMessageW
InitializeCriticalSection
LocalFree
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileW
GetStringTypeW
GetStringTypeA
GetConsoleMode
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
LCMapStringA
WideCharToMultiByte
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointer
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetConsoleCP
UnregisterClassA
CharNextW
MessageBoxW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
CoTaskMemRealloc
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
LoadTypeLi
LoadRegTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysStringLen
VariantClear
VariantInit
SysFreeString
SysAllocString
StrToIntW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ