DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ac5290101361772415bcf25393128b98_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ac5290101361772415bcf25393128b98_JaffaCakes118
Size
80KB
MD5
ac5290101361772415bcf25393128b98
SHA1
1be5b95a3d2f14bb0422f8a623a0e1b99936498f
SHA256
5e6c6421e92b620c929f371cf7c7f9907cb88d67c461d48117e432fc3de6ee58
SHA512
0da7a47902de9be2e0ea16ce098da9dfa90d1e2fd8cb36dd15831552f8b045d9aa1667ab30bd4d04396377e00125561ea3d464d54ee4ce1361a5728e4e3a9f0f
SSDEEP
1536:7YceYhgSiHoj5slzl+7XYi2D4qElTIlHhPo8yIq0yv4A2LmFPgcDaS:oYhmH65srGojJEWHhPo8yIq0yv4A2LYp
Checks for missing Authenticode signature.
resource |
---|
ac5290101361772415bcf25393128b98_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedDecrement
lstrlenW
MultiByteToWideChar
GetShortPathNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
EnterCriticalSection
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcatA
GetPrivateProfileIntA
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
lstrlenA
lstrcpyA
lstrcmpiA
lstrcpynA
DisableThreadLibraryCalls
SetFilePointer
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
FlushFileBuffers
SetStdHandle
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
LCMapStringA
LCMapStringW
ExitProcess
HeapCreate
VirtualFree
VirtualAlloc
CloseHandle
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
RtlUnwind
GetCPInfo
FindWindowExA
MessageBoxA
SendMessageA
CharNextA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueA
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
VariantChangeType
VariantClear
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
VariantCopy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ