DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RegisterInstall
Static task
static1
Behavioral task
behavioral1
Sample
8a0da9dfc4068cdbd3cab8cb55e90351_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8a0da9dfc4068cdbd3cab8cb55e90351_JaffaCakes118
Size
132KB
MD5
8a0da9dfc4068cdbd3cab8cb55e90351
SHA1
3ab66bd38663e249fb88d5b92e7103d7e722aff2
SHA256
ca3d218f551fd2d2d029c8ee6ddff7e201b50932bd7aafb5ceba5e3267c1aef9
SHA512
f4e5d83d6dd87c3f0b8587e1312c6751aedb1e5442f448675fdbfeb25a5245418e1945e3d290c631aae0b3508a6a81dc74d133fe57b931b6b71902c8c887cb38
SSDEEP
3072:F6Bi7URUvr8QSU1Fmm79K8S3Dke8YHCbU5Ex3a09u2ydlYu:cBKUWvr8QPF7ZK8CUAuU8K0IvA
Checks for missing Authenticode signature.
resource |
---|
8a0da9dfc4068cdbd3cab8cb55e90351_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
GetLastError
lstrlenA
lstrcmpiA
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LoadLibraryExA
GetModuleHandleA
LocalFree
IsBadCodePtr
IsBadReadPtr
WriteFile
CloseHandle
FlushFileBuffers
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FreeLibrary
InterlockedExchange
SetStdHandle
UnhandledExceptionFilter
LoadLibraryA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
SetFilePointer
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetOEMCP
CharNextA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc
SysStringLen
LoadRegTypeLi
DispCallFunc
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VariantInit
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysFreeString
SysAllocString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RegisterInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ