DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b4ac402a62d704109d9afdaf463a3d5e_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b4ac402a62d704109d9afdaf463a3d5e_JaffaCakes118
Size
296KB
MD5
b4ac402a62d704109d9afdaf463a3d5e
SHA1
9f3cadb0d0c3b2adfc001d8f9db051805009a0d8
SHA256
ed6ee9707aaaa4b17d1ebb614ec0099d821a6a5b6398e6749e63e2368b2804f6
SHA512
8ff5cf0443c2575d28fe616add1f7f23fbb39753897aaa8113b4bb7844cd42e089f23d5050d8cfaf88f16581a1da3ca1786f94a9fc074f28c2bf372dc25f9f45
SSDEEP
3072:Ec8Xt9XpLHsIBrvxrdPM2o8XQeJeLorHHgBMJGYeXB9mfA5hQDmG9SLOXWpTmHzQ:q5XBrvxriXiQeJWsHCCRKCdNm
Checks for missing Authenticode signature.
resource |
---|
b4ac402a62d704109d9afdaf463a3d5e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
GetModuleHandleW
InterlockedDecrement
SizeofResource
LoadResource
GetLastError
FindResourceW
LoadLibraryExW
GetModuleFileNameW
EnterCriticalSection
RaiseException
FreeLibrary
MultiByteToWideChar
lstrcmpiW
LeaveCriticalSection
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileA
SetEndOfFile
WriteConsoleW
InitializeCriticalSection
HeapAlloc
lstrlenW
FormatMessageW
HeapFree
GetProcessHeap
GlobalAlloc
Sleep
DeleteCriticalSection
CreateThread
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileW
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
LoadLibraryA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
LCMapStringW
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointer
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnregisterClassA
MessageBoxW
CharNextW
ShowWindow
RegCloseKey
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExW
StringFromGUID2
CreateStreamOnHGlobal
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
UnRegisterTypeLi
SysAllocString
VariantClear
VariantInit
SysFreeString
StrToIntW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ