DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8e00b8ab90706ba23f9be80a2748baa9_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8e00b8ab90706ba23f9be80a2748baa9_JaffaCakes118
Size
100KB
MD5
8e00b8ab90706ba23f9be80a2748baa9
SHA1
9a3b5738b694666cbafbc8b8d1d1a87d0bced49a
SHA256
25a2391811c10daefc3ff999765d46fdd0a4b0cf4c50173b97ddd9c9a11d325f
SHA512
0d0297d8f4d0698b2dad3295ab278011c588a97084eb705484ba4281491de4c4e88d898e57bc24ca43ba6d5024376994d8b7b368bb7adcb8587a072ef2298526
SSDEEP
1536:/o7DiL4mUGwhiodoAheBxcMTbCSz0drIB7AlzUmnlRjh:/ovJ61OoCeXcXrK7AlwOTj
Checks for missing Authenticode signature.
resource |
---|
8e00b8ab90706ba23f9be80a2748baa9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
ReadFile
SetStdHandle
LoadLibraryA
GetProcAddress
GetStringTypeW
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersionExA
DeleteFileA
GetModuleFileNameA
DisableThreadLibraryCalls
InterlockedDecrement
GetEnvironmentVariableA
GetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
Sleep
InterlockedExchange
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
SetFilePointer
FlushFileBuffers
CloseHandle
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetKeyState
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
VariantClear
GetErrorInfo
ord15
ord16
ord21
ord18
ord30
ord10
ord11
ord58
ord57
ord32
ord23
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ