DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
aa11541713fca18a2ce5551556dfdc3e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
aa11541713fca18a2ce5551556dfdc3e_JaffaCakes118
Size
384KB
MD5
aa11541713fca18a2ce5551556dfdc3e
SHA1
5eff0bf497b771347f5e344cb310b81f54aadaab
SHA256
5135f01e8bbd310bd7c5df02ad167acf8e1f0aed39b57c4434d98b234791ead9
SHA512
0484a100f3d258a1592c2e18a1a8198b7538250059f54db585bfd13076fa8a16610f3945c8663f5f869a2fe7cf7ea7d03043b4b3697f25e09237af5cc88ef48b
SSDEEP
6144:tdCNYycvWE270IvIhw9WnUUH/PGGql8C3JAJ4SWWsU4knD1q+C:6NYJgd8wInUI/PGGql8C3JAJ4SWWsU4Z
Checks for missing Authenticode signature.
resource |
---|
aa11541713fca18a2ce5551556dfdc3e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetLastError
RaiseException
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileA
SetEndOfFile
GlobalAlloc
CreateThread
Sleep
FormatMessageW
lstrlenW
HeapAlloc
GetProcessHeap
lstrcmpiW
HeapFree
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RtlUnwind
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
LCMapStringW
WriteFile
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
ExitProcess
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
ReadFile
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetConsoleCP
GetConsoleMode
MessageBoxW
CharNextW
UnregisterClassA
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
LoadRegTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
RegisterTypeLi
VarUI4FromStr
SysFreeString
SysAllocString
VariantInit
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ