DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8566c5de05a5f76490a0d180b4234ef4_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8566c5de05a5f76490a0d180b4234ef4_JaffaCakes118
Size
80KB
MD5
8566c5de05a5f76490a0d180b4234ef4
SHA1
35cdfaf4e60b92bde901fa8bb99f685cf3d59961
SHA256
e0d7799bb5ff8d13669755435cff93625f5f98b456025aceac09efc0f444bfd3
SHA512
a955e96bca78a700f9d0b5ae0127ca671b75393fd66beb922f9acc6000fcf389e9d3aad29081b17479125b294fbae605735fc78995666e204f887769bc660baf
SSDEEP
768:xzETx7Zr1WKg8qB783TRaJXYK/DtEcOAqIo3hcFsAK:JElFqB783TRGoKBEtwo3h/AK
Checks for missing Authenticode signature.
resource |
---|
8566c5de05a5f76490a0d180b4234ef4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedDecrement
lstrlenW
MultiByteToWideChar
GetShortPathNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
EnterCriticalSection
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcatA
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
lstrlenA
lstrcpyA
lstrcmpiA
LoadLibraryExA
DisableThreadLibraryCalls
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
WriteFile
GetEnvironmentStringsW
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
LCMapStringA
LCMapStringW
ExitProcess
HeapCreate
VirtualFree
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
MessageBoxA
CharNextA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueA
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
SysAllocStringLen
VariantCopy
VariantClear
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
VariantChangeType
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ