DllMain
DllRegisterServer
DllSetName
DllUnregisterServer
UnadviseEvents
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
8d676ca56d07766eb596e45461515312_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8d676ca56d07766eb596e45461515312_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8d676ca56d07766eb596e45461515312_JaffaCakes118
Size
21KB
MD5
8d676ca56d07766eb596e45461515312
SHA1
6049390e2a8d9ead445bbad93c38152ce0c29540
SHA256
3b15327d4acbf9cda6835e0824df5e6804889fbb6491f6101f85ecd59b56acfb
SHA512
cbcdbf7f218efb943752daa1c4e72a3aebf0700b05e0752a039d0f30ac79086ef4ee0298b9a16d1ddb305e0c370e3be77d5f01ba229927c1ac301b4ee22b1786
SSDEEP
384:uOLYH4lLVRCiERDaXuhXCNK7+gOW3gxhF88N:lS4Ii+hXf2WwXF88N
Checks for missing Authenticode signature.
resource |
---|
8d676ca56d07766eb596e45461515312_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
GetTickCount
GlobalAlloc
GlobalFree
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
HeapAlloc
GetProcessHeap
HeapDestroy
TerminateThread
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetModuleHandleA
lstrlenA
GetSystemTimeAsFileTime
LoadLibraryW
ExpandEnvironmentStringsW
HeapCreate
lstrcpyA
CreateEventA
SetEvent
GetCurrentProcessId
CreateMutexA
GetLastError
VirtualFree
VirtualAlloc
CreateThread
CloseHandle
lstrcpynA
wvsprintfA
wsprintfA
wcscmp
wcsncpy
wcslen
atoi
strstr
tolower
setsockopt
shutdown
send
ioctlsocket
gethostbyname
inet_addr
recv
connect
closesocket
socket
select
WSAGetLastError
WSCEnumProtocols
WSCInstallProvider
WSCGetProviderPath
WSCDeinstallProvider
ntohs
inet_ntoa
WSASetLastError
UuidCreate
ConvertStringSecurityDescriptorToSecurityDescriptorW
DllMain
DllRegisterServer
DllSetName
DllUnregisterServer
UnadviseEvents
WSPStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ