?AfxFreeLibrary@@YAHPEAUHINSTANCE__@@@Z
?AfxLoadLibrary@@YAPEAUHINSTANCE__@@PEBG@Z
?AfxLockGlobals@@YAXH@Z
?AfxUnlockGlobals@@YAXH@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bae550212bff99a8b207f64a7f1aee67_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bae550212bff99a8b207f64a7f1aee67_JaffaCakes118
Size
1.2MB
MD5
bae550212bff99a8b207f64a7f1aee67
SHA1
987722c97138b18802e34c972e65331c5a77af4a
SHA256
20c896c17ea62e174e18810ced89c1f47df84f69e5f94cb5cf11692592c4b993
SHA512
009cc39535fe343b5c7288c8620d2cf6157b10c920c19f1c58a59ecf4061b339b934f2bd709d0c2d1f7425c6f69ed48b4dfb4e2b29da72843fb177b075df4659
SSDEEP
24576:HuYfg4LhHr4NFXKJO1aUiDBvZ2+ITHmpclO9NJrE:p9cKrUqZWLAcU
Checks for missing Authenticode signature.
Processes:
resource |
---|
bae550212bff99a8b207f64a7f1aee67_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetSystemPaletteEntries
GetWindowExtEx
DeleteEnhMetaFile
GetCharWidthW
GetCharWidth32A
GetViewportOrgEx
GetTextExtentExPointI
DeregisterEventSource
GetSecurityDescriptorSacl
LookupAccountSidA
DecryptFileW
VirtualAlloc
GetCommProperties
FillConsoleOutputCharacterA
GetCurrentThread
ConvertDefaultLocale
FreeResource
GetThreadTimes
GetEnvironmentStringsW
GetThreadId
GlobalDeleteAtom
DeleteTimerQueueTimer
GetPrivateProfileStringW
GetNLSVersion
GetLastError
LoadLibraryA
lstrcmpiW
DebugActiveProcess
InsertMenuW
DrawTextW
DrawStateW
DrawIconEx
GetFileTitleW
?AfxFreeLibrary@@YAHPEAUHINSTANCE__@@@Z
?AfxLoadLibrary@@YAPEAUHINSTANCE__@@PEBG@Z
?AfxLockGlobals@@YAXH@Z
?AfxUnlockGlobals@@YAXH@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ