DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a47f9eae6b48a5dab29e59e5fb1f3bde_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a47f9eae6b48a5dab29e59e5fb1f3bde_JaffaCakes118
Size
292KB
MD5
a47f9eae6b48a5dab29e59e5fb1f3bde
SHA1
758a0e96b09a4b603cbd629c1d8ada5d32cdbefd
SHA256
c5d7c7d12686320007d71fa54fd17f826f283591cfd369c159e9c44a7301ec2f
SHA512
d31f165b53d5b3a220e67fe748c087cdd0c1984a450481dcb3c1671b50abd6875580182450eb3452427a35e4e26230b1fa5f85d55c67bf41d76446a0b592099c
SSDEEP
3072:eTC2H+EJCdiG1q5tFCciTKAIKSUOYEox0Gd5FULAFNECGav/bVSjI2QLUQEFV3ts:eTC2HXi1mM7TKAIGyo24O83oLQ00T1
Checks for missing Authenticode signature.
resource |
---|
a47f9eae6b48a5dab29e59e5fb1f3bde_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteFile
SetFilePointer
CreateFileW
GetModuleFileNameW
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetLastError
RaiseException
FreeLibrary
MultiByteToWideChar
SizeofResource
CreateThread
FindResourceW
LoadLibraryExW
lstrcmpiW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryW
CreateFileA
SetEndOfFile
Sleep
FormatMessageW
lstrlenW
LocalAlloc
LocalFree
OpenEventW
WaitForSingleObject
ResetEvent
LoadResource
CloseHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleMode
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapFree
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
DebugBreak
WideCharToMultiByte
lstrlenA
LoadLibraryA
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
ExitProcess
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
UnregisterClassA
MessageBoxW
CharNextW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CoTaskMemFree
VariantClear
LoadRegTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
RegisterTypeLi
VarUI4FromStr
SysFreeString
SysAllocString
VariantChangeType
VariantInit
StrToIntW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ