DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Run
Static task
static1
Behavioral task
behavioral1
Sample
970cc60f0b4e5f6b14173426e8232098_JaffaCakes118.dll
Resource
win7-20240704-en
Target
970cc60f0b4e5f6b14173426e8232098_JaffaCakes118
Size
292KB
MD5
970cc60f0b4e5f6b14173426e8232098
SHA1
e5423459ce5c63cf6093f12630409e8cdb962029
SHA256
26b7805f663ff0e502a48b48db6cd6fa6af3038d143eef4dea292a899a4437c1
SHA512
84860bbc23bbad463a0e1c9e173cbdbcc64cd0b476ebc798ca2d078bf87e38aca08a83f0fa3ebfe62fffe0823d13672e31aec70d1deab0803b801b1d6d3eaeb8
SSDEEP
3072:9iIXfnavSAIWQFtvC4PdwU8nhLWuwtT4TC7d6F0sTLPj0a0UustmcEDELz65j+JL:9ie4U8n98YvPj0aksQaDJL2ih
Checks for missing Authenticode signature.
resource |
---|
970cc60f0b4e5f6b14173426e8232098_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FileTimeToLocalFileTime
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
RaiseException
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
lstrlenA
lstrcpyA
GetModuleFileNameA
lstrcatA
Sleep
InterlockedIncrement
InterlockedDecrement
lstrcmpiA
GetModuleHandleA
lstrcpynA
IsDBCSLeadByte
CompareStringA
CompareStringW
GetEnvironmentVariableA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentThreadId
WaitForSingleObject
GetTickCount
ReleaseMutex
SetEvent
ResetEvent
CloseHandle
CreateMutexA
CreateEventA
CreateFileA
CreateDirectoryA
SetEnvironmentVariableA
GetLargestConsoleWindowSize
GetHandleInformation
GetGeoInfoW
GetGeoInfoA
GetFullPathNameW
GetFullPathNameA
GetFirmwareEnvironmentVariableW
GetFirmwareEnvironmentVariableA
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesExA
GetFileAttributesW
GetFileAttributesA
GetSystemInfo
GetComputerNameA
IsBadReadPtr
CreateMemoryResourceNotification
WriteProfileSectionA
EscapeCommFunction
FileTimeToSystemTime
WriteFile
GetFileTime
CreateThread
GetCurrentProcess
GetVolumeInformationA
LocalAlloc
LocalFree
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
VirtualProtect
VirtualAlloc
VirtualQuery
RtlUnwind
ExitProcess
GetCommandLineA
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetTimeZoneInformation
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ