DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a09839c94e395db88f518e582c8a98f5_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a09839c94e395db88f518e582c8a98f5_JaffaCakes118
Size
1.5MB
MD5
a09839c94e395db88f518e582c8a98f5
SHA1
3e53f5b48f335a0934a47d9d0916dbceeb7cc045
SHA256
283dee359fb52e9558aaea6232a28ea29ddfaf88b6e03b5b0e63c2aea2b3b320
SHA512
d8676e729a0b9304113d7ed99850dab5f0ac33918c87a055d5f64837d63b131a45af78dc0c6bae00d9d96597ea89a20c1cb2387c86cb5b3eda2e92783d32d790
SSDEEP
24576:1rgMrsqjYrH6zulpXtR5gDobdiyWRaYQR2J98YzXsiR4Vhtz4vSUEyNNruOknHOx:Hr9u/cZz5gig4qXiNSo26Tad5Fc6OS
Checks for missing Authenticode signature.
resource |
---|
a09839c94e395db88f518e582c8a98f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
GetCurrentThreadId
GetLocaleInfoW
GetDriveTypeA
SetEndOfFile
CreateFileA
GetCurrentDirectoryW
CreateFileW
SetStdHandle
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
LoadLibraryW
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
RtlUnwind
GetCommandLineA
GetVersion
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RaiseException
HeapFree
GetLastError
CreateThread
TlsSetValue
ExitThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
HeapAlloc
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
CloseHandle
SetFilePointer
FlushFileBuffers
UnhandledExceptionFilter
GetFullPathNameW
GetCurrentDirectoryA
ReadFile
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetEnvironmentVariableA
CoUnmarshalInterface
CoMarshalInterThreadInterfaceInStream
SysFreeString
SysAllocString
SysStringLen
SysStringByteLen
VariantClear
ShowWindow
IsWindow
UrlMkSetSessionOption
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ