DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a8bdf5ce6b63851582e4c5eb3e3cdcd6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a8bdf5ce6b63851582e4c5eb3e3cdcd6_JaffaCakes118
Size
96KB
MD5
a8bdf5ce6b63851582e4c5eb3e3cdcd6
SHA1
2aefed39ced238377c5ec81ac3a338cd83e88c1b
SHA256
471ae4ebae5e9ca2f765093bb144b3f66c49c83cf75e4de2edb6ffd34efd4fb7
SHA512
8eeab30469159c53e2d1051e77134f0f5177d89d4bc229c5ce859040177e97318183884b00a8724f87ff1ce77de54bf7fc536f25807b520c2e051439cc31aa12
SSDEEP
1536:VYrvosGqgOCUX2TNi2riiVPXqHcmLydUBJgC:VYrswXm/PXqHcmLydU
Checks for missing Authenticode signature.
resource |
---|
a8bdf5ce6b63851582e4c5eb3e3cdcd6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
lstrlenA
GetFileSize
SetFilePointer
GetLastError
CloseHandle
FlushFileBuffers
GetSystemTime
MultiByteToWideChar
CreateProcessA
Sleep
WriteFile
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
DisableThreadLibraryCalls
lstrcatA
lstrlenW
lstrcmpiA
LocalFree
TlsGetValue
SetLastError
HeapReAlloc
HeapAlloc
HeapSize
GetCPInfo
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetUnhandledExceptionFilter
VirtualFree
VirtualAlloc
HeapDestroy
GetVersionExA
HeapCreate
GetStringTypeW
GetStringTypeA
lstrcpyA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
InterlockedDecrement
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
HeapFree
LCMapStringA
GetModuleHandleA
GetEnvironmentVariableA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SendMessageA
wsprintfA
FindWindowA
MessageBoxA
LoadStringA
GetClassNameA
PostMessageA
RegEnumKeyA
RegEnumValueA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromCLSID
CoDisconnectObject
SysAllocStringByteLen
SysStringByteLen
VariantInit
SysAllocStringLen
VariantChangeType
SysAllocString
VariantCopy
VariantClear
SysFreeString
SysStringLen
LoadRegTypeLi
CoInternetGetSession
InternetGetCookieA
ord23
ord30
ord16
ord32
ord18
ord57
ord21
ord15
ord58
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ