DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bc43f08bb176375135b3d945cd4408b5_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bc43f08bb176375135b3d945cd4408b5_JaffaCakes118
Size
184KB
MD5
bc43f08bb176375135b3d945cd4408b5
SHA1
0870c1fa14e543f8381a66888bd0cf95fe0d2caf
SHA256
f960a3d5560b99ce14dddcbc9a455462705e35b595c245903955a137f19b21ea
SHA512
ac6fe877421f666a0921f9355a86980ad3a45977eae1e180ec7e9b7b010c702dc518231329839e572383f5ac0363f27de3cfaa2de4532417d41f2d562f21ca3f
SSDEEP
3072:gGkdkLksrRuxkYEQxOfpI6S2lQEjeBXaYKBT96DfisKgnMe68S7WBv0:gpCAspI2ptUuYaYG4WFgMd8OWBM
Checks for missing Authenticode signature.
resource |
---|
bc43f08bb176375135b3d945cd4408b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
SizeofResource
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
lstrcpyA
MulDiv
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
GetProcessAffinityMask
SetProcessAffinityMask
Sleep
lstrcatA
LoadLibraryA
GetProcAddress
GetVersionExA
GetCurrentProcess
FlushInstructionCache
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetEnvironmentVariableA
MoveWindow
WinHelpA
ShowWindow
GetDialogBaseUnits
LoadStringA
CreateDialogParamA
IsDialogMessageA
SetWindowLongA
DestroyWindow
ReleaseDC
GetDC
IsWindow
CharNextA
CreateFontIndirectA
SelectObject
GetTextMetricsA
GetTextExtentPointA
DeleteObject
GetDeviceCaps
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegEnumValueA
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
SysFreeString
SysStringLen
SysAllocString
VarUI4FromStr
RegisterTypeLi
LoadTypeLi
SysAllocStringLen
__CxxFrameHandler
sprintf
wcscpy
_ftol
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
free
malloc
realloc
_mbsnbcpy
_except_handler3
_initterm
_adjust_fdiv
DMOUnregister
DMORegister
MoCopyMediaType
MoFreeMediaType
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE