DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
af201f790fd618971e2f2e877f55cf1c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
af201f790fd618971e2f2e877f55cf1c_JaffaCakes118
Size
336KB
MD5
af201f790fd618971e2f2e877f55cf1c
SHA1
0893721949475780c36ee5588814b8cdc7ce1116
SHA256
980f36fd05b8d9f817a5a25e018d0e3aa2eddca15bfbc60e38e63d28362794e9
SHA512
4fe47680accce6ae945ed19cf67679bf64998da4e27938410b51d08ded2fcba017281801fd4c7d65b4eaf5f2c0a14f8d2774adc5f7707a6adb6bd007b2dd5ad7
SSDEEP
6144:1Pgb6OLpjtxG+Ht1LSPH3xqK3/17Qdd7xhl6:aOMtxG+HcX73/1Wd74
Checks for missing Authenticode signature.
resource |
---|
af201f790fd618971e2f2e877f55cf1c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
FindResourceW
LoadLibraryExW
GetModuleFileNameW
EnterCriticalSection
RaiseException
FreeLibrary
DeleteCriticalSection
lstrcmpiW
LeaveCriticalSection
InitializeCriticalSection
MultiByteToWideChar
LoadResource
GetModuleHandleW
InterlockedDecrement
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileA
SetEndOfFile
WriteConsoleW
SizeofResource
FormatMessageW
HeapFree
GetProcessHeap
GlobalAlloc
Sleep
CreateThread
HeapAlloc
InterlockedIncrement
lstrlenW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileW
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
LoadLibraryA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
LCMapStringW
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointer
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnregisterClassA
MessageBoxW
CharNextW
ShowWindow
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
CoCreateInstance
CreateStreamOnHGlobal
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
SysStringLen
VarUI4FromStr
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
VariantClear
VariantInit
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ