DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bf4d6607790d2cad617d41f21f1e8f6c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bf4d6607790d2cad617d41f21f1e8f6c_JaffaCakes118
Size
2.5MB
MD5
bf4d6607790d2cad617d41f21f1e8f6c
SHA1
4825e04b0ec09a987123c8c7d6e03bde768b2f40
SHA256
19f94a2ad2a9ea16076cd27dd09e1cbb5f3bd7db351117f4a80829530050a8e0
SHA512
04f9eb69e914099bf14b99a02512a73427b395e694f6592c98662b8f9e4d78206115963b91d140cd0d2ab3bbe1e79849dbbac0e7be064c91e65ef2f9350f0f0a
SSDEEP
49152:31ebNosarymiVdXwocMeZDKJUimJDTOnIbVx:3QbqsiyXwoDesJUie
Checks for missing Authenticode signature.
resource |
---|
bf4d6607790d2cad617d41f21f1e8f6c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
MultiByteToWideChar
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetStdHandle
WideCharToMultiByte
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
IsValidLocale
LoadLibraryW
GetLastError
HeapFree
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
CloseHandle
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetFullPathNameA
GetCurrentDirectoryA
GetTimeZoneInformation
GetFullPathNameW
GetLocaleInfoA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
SetEnvironmentVariableA
IsWindow
SysStringLen
SysFreeString
SysAllocString
VariantClear
VariantInit
UrlMkSetSessionOption
SHGetFileInfoW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ