DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bcb43fe2bc196733013f75dfa97a7c78_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bcb43fe2bc196733013f75dfa97a7c78_JaffaCakes118
Size
76KB
MD5
bcb43fe2bc196733013f75dfa97a7c78
SHA1
93a7e794ce78064b3717e82f211df1786ba695eb
SHA256
c00e86ced8cc271f245eebe8e5810a4ee1cc47c50a9f18854143f1dde1cfea47
SHA512
872bf540c8ea89a4ba0394865988d8428a3c4dcb222c22ae5954d4a6344a534a7a13da26c88b3ecd0052658fceea25bced68b731fe526dacaaa449b297e0c756
SSDEEP
768:Gl5S2ZAOJkDUmkVvxrzgaytTkRSmkvbTEjYB7xi0yyOIk/CyuQXRg2lB6n7:OAQmkVlsaRIvbTEjfDIU7nFlBi7
Checks for missing Authenticode signature.
resource |
---|
bcb43fe2bc196733013f75dfa97a7c78_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OutputDebugStringA
DebugBreak
LoadLibraryA
GetProcAddress
LCMapStringW
LCMapStringA
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
lstrlenA
lstrcpyA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DisableThreadLibraryCalls
HeapAlloc
GetCommandLineA
GetVersion
HeapFree
ExitProcess
GetCPInfo
GetACP
GetOEMCP
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
wvsprintfA
CharNextA
LoadStringA
FindWindowA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
SHGetSpecialFolderPathA
ShellExecuteA
SysFreeString
LoadRegTypeLi
SysStringLen
InternetReadFile
InternetQueryDataAvailable
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
ord18
ord15
ord57
ord21
ord23
ord32
ord58
ord30
ord31
ord16
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ