DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b28fc1979875136eb9850d72428da9b4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b28fc1979875136eb9850d72428da9b4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b28fc1979875136eb9850d72428da9b4_JaffaCakes118
Size
193KB
MD5
b28fc1979875136eb9850d72428da9b4
SHA1
83e6498c0a9fbff3634af947bd6b75b6c3a42251
SHA256
55ebcc813c91e9040b6236da4fbb36143c6da3205c800bc79c54211f7993dafd
SHA512
e5c5248860ba86eb259555ddc2c9e954dbf21a8e61a2cc51edd93656f594b57c48d59cf5ee9073e08dc10f56ec8aeb4b1a4d7c6f137982e46b985e6e20f554f7
SSDEEP
6144:yt1wNm4kegEnUrmhR/Vln5jMKayuGPe8t:MEYlrIFVFm8t
Checks for missing Authenticode signature.
resource |
---|
b28fc1979875136eb9850d72428da9b4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
MultiByteToWideChar
lstrcmpiW
lstrcpynW
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
FreeLibrary
LoadLibraryExW
InitializeCriticalSection
GetModuleFileNameW
DeleteFileW
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
CreateFileW
GetTempPathW
lstrcatW
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
RaiseException
lstrcpyW
lstrlenW
WideCharToMultiByte
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
GetModuleHandleW
InterlockedExchange
QueryPerformanceCounter
ExitProcess
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
CharNextW
LoadStringW
wsprintfW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumKeyExW
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
ProgIDFromCLSID
CoCreateInstance
StringFromGUID2
SysFreeString
SysAllocString
RegisterTypeLi
UnRegisterTypeLi
SysStringLen
LoadTypeLi
LoadRegTypeLi
SafeArrayGetUBound
SafeArrayGetElement
VariantInit
VarUI4FromStr
CreateErrorInfo
SetErrorInfo
SysAllocStringLen
SysReAllocStringLen
PathFindExtensionW
_ltoa
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__security_error_handler
wcsstr
_wtoi
wcsncpy
wcschr
wcstok
memcmp
malloc
free
_CxxThrowException
memset
_except_handler3
wcslen
_wcsupr
strlen
memcpy
memmove
??_V@YAXPAX@Z
_purecall
??3@YAXPAX@Z
__CxxFrameHandler
realloc
??_U@YAPAXI@Z
??2@YAPAXI@Z
swprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE