DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8beb6983670d542b1d9e091887bc3388_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8beb6983670d542b1d9e091887bc3388_JaffaCakes118
Size
80KB
MD5
8beb6983670d542b1d9e091887bc3388
SHA1
12b2cd13c542ed195bf55be199c0f56f7dd5c248
SHA256
d30ab187eaa1c203feef885b7487ec0d9567a0b24090777e5b1a69a6d80505f4
SHA512
1a3499a5c3940db86d2e6e30d62a74d8f2e6879de587c4d0a149478dcb7b2141a0261f381becb964003f76a6a7cc9a7bad5ffa5cb6618b804b5f85b3a9438e25
SSDEEP
768:xzETx7Zr1WKg8qB783TRaJXYK/DtEcOAqIo3hcFsAu:JElFqB783TRGoKBEtwo3h/Au
Checks for missing Authenticode signature.
resource |
---|
8beb6983670d542b1d9e091887bc3388_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedDecrement
lstrlenW
MultiByteToWideChar
GetShortPathNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
EnterCriticalSection
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcatA
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
lstrlenA
lstrcpyA
lstrcmpiA
LoadLibraryExA
DisableThreadLibraryCalls
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
WriteFile
GetEnvironmentStringsW
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
LCMapStringA
LCMapStringW
ExitProcess
HeapCreate
VirtualFree
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
MessageBoxA
CharNextA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueA
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
SysAllocStringLen
VariantCopy
VariantClear
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
VariantChangeType
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ