DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b90780a4260fe204ddc451354e117965_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b90780a4260fe204ddc451354e117965_JaffaCakes118
Size
232KB
MD5
b90780a4260fe204ddc451354e117965
SHA1
dc5e442c6818ffccfa1c1ae79600adceb6990279
SHA256
326c8b43cf6818f874e878c7891f8e7138daf5b482b521a4cee890113744c2b0
SHA512
ed813875258edca1623288aaa53f142fb04c294cd6a9b87b4faa919c43d8daaa2603cb23f8cdc44dee2d2d88008a647bcc275d876ce89439a0cfe4f1f52e917e
SSDEEP
3072:Rr0kYSWt3XkcMUZ8Dt91q34RN7wK9jTgGsyxkiKkllJugPw4SV:zvW5MUWv03Yngb7mJuw5s
Checks for missing Authenticode signature.
resource |
---|
b90780a4260fe204ddc451354e117965_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrlenA
lstrcmpiA
DisableThreadLibraryCalls
InterlockedIncrement
GetModuleFileNameA
EnterCriticalSection
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
GlobalAlloc
GlobalLock
IsDBCSLeadByte
GlobalUnlock
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
LocalFree
RtlUnwind
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetProcAddress
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
HeapSize
ExitProcess
VirtualFree
HeapDestroy
HeapCreate
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
CharNextA
RegisterClipboardFormatA
UnregisterClassA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
StringFromGUID2
CreateDataAdviseHolder
CoTaskMemFree
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ