?Authenticate_b@@YA_NPAE@Z
?InitAuthentication_v@@YAXPAE@Z
?IsAuthenticated_b@@YA_NXZ
?IsUnlocked_b@@YA_NXZ
?Unlock_b@@YA_NXZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8317ca025af6c804c0b487ad6a0e1f46_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8317ca025af6c804c0b487ad6a0e1f46_JaffaCakes118
Size
416KB
MD5
8317ca025af6c804c0b487ad6a0e1f46
SHA1
e54b5d97c6e3bf164da66777ac5e41a7cb8a1bed
SHA256
447ab5858672ec735ea16c5f9241ab8d3dc89e073672c77146c7d0f35d90051c
SHA512
19df5b1c4624d4d1e0863f6a33d52378596857231e2c48c904b5345fbf06a50043d42592cfd73e841390f2c1f8810f9dd8567d77d4282e5b0236cf414edc6018
SSDEEP
6144:/EVn/i9l5AS+Y9jf98ZKab9MP7ntsmNI6I8BJDgcy/LWVoAXn6/+magVWL:8Va9l5ASJjV8LY7ntsmBBZgcBLmagi
Checks for missing Authenticode signature.
resource |
---|
8317ca025af6c804c0b487ad6a0e1f46_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
MultiByteToWideChar
GetSystemInfo
GetFileSize
LocalFree
FormatMessageA
IsBadWritePtr
IsBadReadPtr
HeapFree
GetProcessHeap
HeapAlloc
HeapDestroy
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcpyA
lstrlenA
GetShortPathNameA
GetModuleFileNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetProcAddress
LoadLibraryA
lstrcatA
SetEndOfFile
WriteFile
ReadFile
GetDiskFreeSpaceA
lstrlenW
WideCharToMultiByte
CreateFileA
SetFilePointer
CloseHandle
InterlockedDecrement
InterlockedIncrement
GetEnvironmentVariableA
GetLastError
GetVersionExA
RaiseException
LCMapStringW
GetOEMCP
GetVolumeInformationA
GetTickCount
RtlUnwind
ResumeThread
CreateThread
TlsSetValue
ExitThread
HeapReAlloc
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsW
LCMapStringA
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
SetStdHandle
GetEnvironmentStrings
GetEnvironmentStringsW
HeapSize
SetUnhandledExceptionFilter
IsBadCodePtr
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
wsprintfA
CharNextA
MessageBoxA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
RegisterTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
LoadTypeLi
VarUI4FromStr
SysAllocString
?Authenticate_b@@YA_NPAE@Z
?InitAuthentication_v@@YAXPAE@Z
?IsAuthenticated_b@@YA_NXZ
?IsUnlocked_b@@YA_NXZ
?Unlock_b@@YA_NXZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE