DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b6683183430c59ea6c8a021062c3a1b5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b6683183430c59ea6c8a021062c3a1b5_JaffaCakes118
Size
112KB
MD5
b6683183430c59ea6c8a021062c3a1b5
SHA1
b3a72908828c9bbe98a9bda556bcf8562fabd498
SHA256
15fdfa0159e5c680ebf2cf218f104189995286ce87b58a9afb4072174a5c4149
SHA512
25e2b08dc72d79eb8d489b7ad3c6699afbe0afee95c9330695915fb5c885a48ec6512b9aa5bb792e8fc0c06e46dd3a4653c22dbbe98693e5d4cbc3148679f2fb
SSDEEP
1536:uAD6RwZLc8dftSp2OvvoXssqSgtT8JgNpwc3VriDlsSVyi:uAD6eZLc8dfo8OvvCvmvVriDlsS
Checks for missing Authenticode signature.
resource |
---|
b6683183430c59ea6c8a021062c3a1b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
GetSystemTime
FlushInstructionCache
GetCurrentProcess
SetEndOfFile
CreateFileA
ReadFile
FlushFileBuffers
SetStdHandle
SetFilePointer
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
LoadLibraryA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleHandleA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetProcAddress
FreeLibrary
Sleep
OutputDebugStringA
DebugBreak
WideCharToMultiByte
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetStringTypeA
UnhandledExceptionFilter
TlsGetValue
SetLastError
TlsFree
TlsAlloc
HeapSize
HeapReAlloc
TerminateProcess
GetPrivateProfileStringA
WritePrivateProfileStringA
MultiByteToWideChar
lstrlenA
DisableThreadLibraryCalls
CloseHandle
lstrlenW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
GetVersionExA
GetModuleFileNameA
HeapAlloc
LCMapStringW
GetLongPathNameA
WriteFile
GetLastError
LocalFree
RtlUnwind
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
GetCommandLineA
GetVersion
RaiseException
HeapFree
GetCPInfo
GetACP
GetOEMCP
ExitProcess
LCMapStringA
SendMessageA
InvalidateRect
MessageBoxA
CreateWindowExA
GetSystemMetrics
wsprintfA
CharUpperA
SetWindowPos
MoveWindow
CharLowerA
DestroyWindow
CharNextA
wvsprintfA
GetCursorPos
WindowFromPoint
GetWindow
GetClassNameA
IsWindowVisible
GetWindowTextA
FindWindowExA
LoadStringA
CallWindowProcA
GetWindowLongA
DefWindowProcA
SetWindowLongA
ShowWindow
GetParent
LoadCursorA
SetCursor
GetClientRect
PtInRect
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
SHGetSpecialFolderPathA
CoInitialize
CoCreateInstance
CoTaskMemFree
CoUninitialize
SysAllocString
VariantClear
SysAllocStringLen
SysStringLen
LoadRegTypeLi
SysFreeString
ord39
ord46
ord30
ord58
ord47
ord57
ord15
ord16
ord21
ord23
ord44
ord43
ord32
ord18
URLDownloadToFileA
_TrackMouseEvent
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ