?AfxFreeLibrary@@YAHPEAUHINSTANCE__@@@Z
?AfxLoadLibrary@@YAPEAUHINSTANCE__@@PEBG@Z
?AfxLockGlobals@@YAXH@Z
?AfxUnlockGlobals@@YAXH@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b9b6b51144875ab0e2b29256a5de1483_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b9b6b51144875ab0e2b29256a5de1483_JaffaCakes118
Size
1.2MB
MD5
b9b6b51144875ab0e2b29256a5de1483
SHA1
fa894de7d15f6ea99a125c52fae5a468f51d27a4
SHA256
57aebefa5e25857379598239bf44620b3cc86347e87215c1f2e08581f5af4d89
SHA512
45696f27dbcf76f3656622b43e7c2dc1df5c69f9a4c28122d1a0cab4945a5842f8daac1855d0e143d631a096bec5fe630dc7211b225ede8657a5c61d4a471f63
SSDEEP
24576:KuYfg4LhHr4NFXKJO1aUiDBvZ2+ITHmpclO9NhOO:S9cKrUqZWLAcU8O
Checks for missing Authenticode signature.
resource |
---|
b9b6b51144875ab0e2b29256a5de1483_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetSystemPaletteEntries
GetWindowExtEx
DeleteEnhMetaFile
GetCharWidthW
GetCharWidth32A
GetViewportOrgEx
GetTextExtentExPointI
DeregisterEventSource
GetSecurityDescriptorSacl
LookupAccountSidA
DecryptFileW
VirtualAlloc
GetCommProperties
FillConsoleOutputCharacterA
GetCurrentThread
ConvertDefaultLocale
FreeResource
GetThreadTimes
GetEnvironmentStringsW
GetThreadId
GlobalDeleteAtom
DeleteTimerQueueTimer
GetPrivateProfileStringW
GetNLSVersion
GetLastError
LoadLibraryA
lstrcmpiW
DebugActiveProcess
InsertMenuW
DrawTextW
DrawStateW
DrawIconEx
GetFileTitleW
?AfxFreeLibrary@@YAHPEAUHINSTANCE__@@@Z
?AfxLoadLibrary@@YAPEAUHINSTANCE__@@PEBG@Z
?AfxLockGlobals@@YAXH@Z
?AfxUnlockGlobals@@YAXH@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ