DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b081c0cb4de4cd0d35c54651ca52d1df_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b081c0cb4de4cd0d35c54651ca52d1df_JaffaCakes118
Size
236KB
MD5
b081c0cb4de4cd0d35c54651ca52d1df
SHA1
d492ca4b8cfdff56d76eeb9831f6b3d162b8e7b0
SHA256
d1de3ceb123135da164e9417f4b4ab3fefbb63d35ecb7fe13990fc473711a546
SHA512
b08f3e4df31cdd6859c229c3a170af06a29eef021037cf974f2a609e2eafd81a9b17bd2fa66c47c0512a7df6c347746afbecc56d7498fac1aa7968042847dd53
SSDEEP
3072:2bMgDnaDBWE4oBPEzNuGaiS7DCpCKPkPlB+MO378GGSCuExg516fr93gm:gMgzg94oGu3C4CSlA37mL26fr93l
Checks for missing Authenticode signature.
resource |
---|
b081c0cb4de4cd0d35c54651ca52d1df_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalAlloc
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
lstrlenA
lstrcmpiA
lstrlenW
lstrcpyA
GetModuleHandleA
GetModuleFileNameA
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
Sleep
GetTickCount
lstrcatA
GetCurrentProcess
HeapFree
GetProcessHeap
FlushInstructionCache
HeapAlloc
GetCurrentThreadId
GetEnvironmentVariableA
VirtualProtect
VirtualQuery
CloseHandle
ResumeThread
WaitForSingleObject
CreateThread
SetEnvironmentVariableA
FreeLibrary
GetProcAddress
LoadLibraryA
ReleaseMutex
SetEvent
ResetEvent
CreateMutexA
CreateEventA
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpA
GetVolumeInformationA
FlushFileBuffers
SetStdHandle
SetFilePointer
IsBadCodePtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TerminateProcess
LocalFree
SetUnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
IsBadWritePtr
VirtualFree
HeapCreate
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCPInfo
GetOEMCP
IsBadReadPtr
GetCommandLineA
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
CreateAcceleratorTableA
GetParent
GetClassNameA
RedrawWindow
GetDlgItem
SetFocus
GetFocus
IsChild
GetWindow
DestroyAcceleratorTable
BeginPaint
EndPaint
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
GetClientRect
FillRect
SetCapture
ReleaseCapture
GetSysColor
GetWindowTextLengthA
GetWindowTextA
SendMessageA
SetWindowTextA
MsgWaitForMultipleObjects
RegisterWindowMessageA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetDesktopWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
wsprintfA
GetClassInfoExA
DestroyWindow
GetCursorPos
OffsetRect
GetWindowRect
CallWindowProcA
GetWindowLongA
SetWindowLongA
DefWindowProcA
SetWindowPos
IsWindow
MoveWindow
SetTimer
KillTimer
PostThreadMessageA
ShowWindowAsync
CharNextA
UnregisterClassA
ShowWindow
GetModuleBaseNameA
StrToIntA
StrStrA
PathFindExtensionA
StrCmpNA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ