DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b6c648cf27ae133786e9d36e72b367a4_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b6c648cf27ae133786e9d36e72b367a4_JaffaCakes118
Size
124KB
MD5
b6c648cf27ae133786e9d36e72b367a4
SHA1
13e19f8d118dbf2ce897a2a5812f083ed0b01d50
SHA256
c3be37542bb9c82c915254ee046de76207d8883356d8a00463a4550e859adf96
SHA512
a8ee1f2f439f54006c57d6978854f76290025871a26bacdaaefacdee561c29c9e9d8e994c3085af566c98b98f739d3967a10dfd77c5a2b9101a5f7ad41eca294
SSDEEP
1536:wB006Cx1TWYaw/dRf/ldcXvU5/j75q8s1h7NcLkfIO2TkLZFdyL2J5NFs5gF6QrY:wi0F16Ya8L7XNjM37NchQzZJBs5gtr
Checks for missing Authenticode signature.
resource |
---|
b6c648cf27ae133786e9d36e72b367a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
MulDiv
lstrcmpW
GetProcAddress
GetTempPathW
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
SetFilePointer
GlobalLock
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetModuleFileNameW
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GlobalUnlock
FlushInstructionCache
GetCurrentProcess
SetLastError
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
lstrlenA
OutputDebugStringW
DebugBreak
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
GetLastError
RaiseException
lstrcmpiW
lstrlenW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
HeapSize
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
Sleep
VirtualQuery
HeapDestroy
HeapCreate
HeapReAlloc
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetConsoleCP
FreeLibrary
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
CloseHandle
GetVersionExW
WideCharToMultiByte
InvalidateRect
GetDC
SetFocus
CallWindowProcW
CharNextW
LoadStringW
wvsprintfW
CharUpperW
DefWindowProcW
RegisterClassExW
UnregisterClassA
LoadCursorW
SetWindowLongW
GetWindowLongW
DestroyAcceleratorTable
GetDesktopWindow
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
BeginPaint
EndPaint
IsChild
GetFocus
InvalidateRgn
GetWindow
GetDlgItem
SendMessageW
IsWindow
GetClassNameW
GetSysColor
SetWindowPos
RedrawWindow
GetClassInfoExW
CreateWindowExW
DestroyWindow
CreateAcceleratorTableW
ClientToScreen
GetParent
ScreenToClient
MoveWindow
SetCapture
ReleaseCapture
FillRect
GetClientRect
ReleaseDC
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
BitBlt
DeleteDC
GetStockObject
GetObjectW
GetDeviceCaps
CreateSolidBrush
RegCloseKey
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
CryptGetHashParam
RegDeleteKeyW
CryptDestroyHash
CryptAcquireContextW
CryptCreateHash
CryptReleaseContext
CryptHashData
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeEx
OleUninitialize
StringFromGUID2
OleLockRunning
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
CoUninitialize
CoLoadLibrary
CoFreeLibrary
LoadTypeLi
SysAllocString
OleCreateFontIndirect
VarUI4FromStr
UnRegisterTypeLi
SysAllocStringLen
VariantInit
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
InitCommonControlsEx
SHGetFolderPathW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ