DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ae320427a0f8ab1be98adcef88e5ccc9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ae320427a0f8ab1be98adcef88e5ccc9_JaffaCakes118
Size
332KB
MD5
ae320427a0f8ab1be98adcef88e5ccc9
SHA1
a97f8d66113602f078f87abe2a56a14d252f44ee
SHA256
13acc53513c538bad194a680e1c4abf33798b93f68e2044a2e428fc6b1b3089e
SHA512
053f652e3d9021d8afb8afba08bc45c0e075a566918c1ade07ff0433d5a0479d97ee819468219fc41c8790ae8ddc426513906db4b827313f6c328d368ab76317
SSDEEP
6144:A16A/Bu5XvUD8KA7jyWilWJQ262JJO6SrBLDpIKBFBzVIE6KKKBctKKKjKKBfctx:AUApsvUD82WdJQ4Jr8gD
Checks for missing Authenticode signature.
resource |
---|
ae320427a0f8ab1be98adcef88e5ccc9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleW
InterlockedDecrement
SizeofResource
LoadResource
GetLastError
FindResourceW
LoadLibraryExW
GetModuleFileNameW
EnterCriticalSection
RaiseException
FreeLibrary
DeleteCriticalSection
InterlockedIncrement
LeaveCriticalSection
InitializeCriticalSection
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileA
SetEndOfFile
WriteConsoleW
MultiByteToWideChar
Sleep
CreateThread
HeapAlloc
lstrlenW
FormatMessageW
HeapFree
GetProcessHeap
lstrcmpiW
GlobalAlloc
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileW
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
LoadLibraryA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointer
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnregisterClassA
MessageBoxW
CharNextW
ShowWindow
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
CoCreateInstance
CreateStreamOnHGlobal
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
UnRegisterTypeLi
VariantClear
VariantInit
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ