DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a13c12a86ad66c23a2afef34c759aa7c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a13c12a86ad66c23a2afef34c759aa7c_JaffaCakes118
Size
328KB
MD5
a13c12a86ad66c23a2afef34c759aa7c
SHA1
555614f37e944a5f0d39852e0e46434ac8f2e159
SHA256
2719a67655fa74b1416a5124bbddf1c1c10c93698326cee50012dd74a673e8a8
SHA512
7d483dc0b0086600df2169cb8cf69cb64c2c48053848f60a7aaf9e173ee5217c31178d750602d20bf8508150857ba64df8cb6bffa3400329672d40075b64e1f1
SSDEEP
6144:xJz9qHLMBDZb/HHGedw6GKFTQyuPGL/4FvR78iFtugnmc:bxqHKDHI6Gv+Av8
Checks for missing Authenticode signature.
resource |
---|
a13c12a86ad66c23a2afef34c759aa7c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strncmp
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
_CxxThrowException
??2@YAPAXI@Z
_purecall
_EH_prolog
__CxxFrameHandler
_except_handler3
strncpy
??3@YAXPAX@Z
wcscpy
wcslen
_itow
wcscat
??1type_info@@UAE@XZ
_wcsicmp
_ltoa
wcschr
wcsstr
wcstol
_ftol
wcsrchr
floor
wcsncmp
wcstok
realloc
_wtoi
bsearch
qsort
wcscmp
swprintf
_snwprintf
Sleep
GetCPInfo
ResetEvent
LoadLibraryA
WaitForSingleObject
SetEvent
CreateEventA
CreateMutexA
InterlockedCompareExchange
GetVersionExA
LoadLibraryExA
GetSystemDefaultLCID
GetLastError
GetModuleFileNameA
DisableThreadLibraryCalls
FreeLibrary
CloseHandle
InterlockedExchange
MultiByteToWideChar
FormatMessageA
LocalAlloc
FormatMessageW
GetCurrentThreadId
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsBadReadPtr
IsBadWritePtr
IsValidLocale
GetTimeZoneInformation
GetProcAddress
LoadStringW
LoadStringA
RegDeleteKeyA
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCreateKeyExA
CoTaskMemFree
CoCreateInstance
CoCreateFreeThreadedMarshaler
StringFromCLSID
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetDim
VarDateFromStr
SafeArrayCreate
SafeArrayRedim
SafeArrayPutElement
SafeArrayCreateEx
SafeArrayGetElement
SystemTimeToVariantTime
SafeArrayCreateVector
SafeArrayUnaccessData
VariantTimeToSystemTime
VarDecCmp
VarDecFromI4
VarDecFromStr
DispGetParam
SafeArrayCopy
VariantCopy
VariantChangeTypeEx
SafeArrayCopyData
SafeArrayDestroy
VariantInit
VariantClear
VariantChangeType
LoadRegTypeLi
GetErrorInfo
SysAllocStringLen
LoadTypeLibEx
CreateErrorInfo
SetErrorInfo
SysStringLen
SysAllocString
SysFreeString
UnRegisterTypeLi
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ