DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d021a1e7ea7ef50c1131bf01ecc72224_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d021a1e7ea7ef50c1131bf01ecc72224_JaffaCakes118
Size
316KB
MD5
d021a1e7ea7ef50c1131bf01ecc72224
SHA1
a3eeb89e3214980a8899a8d9a89eee882e9d8f19
SHA256
e8c3000b11d203e5a1a56cf0de34ab0a939f898c75eef8d734296676ff4ceb88
SHA512
e552c91f885c6943b74ad4e952a02dd6b04552951393099c0122ae4b5fceebeca61a44a510f0576a1cd2722703bfa3f32f24de14afa27da5e2d6a19ebb3e6aec
SSDEEP
6144:Vg5CtnqqsgpInxl9NlJ3xp5fxzpDZ65STrUwMSAJ:Vg5CtqV6eTNj5Z32STraSA
Checks for missing Authenticode signature.
resource |
---|
d021a1e7ea7ef50c1131bf01ecc72224_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
InitializeCriticalSection
LeaveCriticalSection
lstrcmpiW
LockResource
GetThreadLocale
SetThreadLocale
MultiByteToWideChar
UpdateResourceW
EndUpdateResourceW
lstrlenA
GetTickCount
GetExitCodeThread
Sleep
TerminateThread
CloseHandle
EnterCriticalSection
DeleteCriticalSection
GetModuleFileNameW
RaiseException
GetLastError
WideCharToMultiByte
lstrlenW
FreeLibrary
GetProcAddress
BeginUpdateResourceW
LoadLibraryW
GetLocaleInfoA
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnregisterClassA
MessageBoxW
PostMessageW
CharNextW
IsTextUnicode
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
CoTaskMemFree
CoGetClassObject
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
RegisterTypeLi
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysFreeString
VarUI4FromStr
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VarBstrCmp
VariantClear
SysAllocStringLen
VarBstrCat
UnRegisterTypeLi
NdrStubForwardingFunction
NdrOleAllocate
NdrDllRegisterProxy
NdrDllCanUnloadNow
IUnknown_Release_Proxy
NdrCStdStubBuffer2_Release
IUnknown_AddRef_Proxy
NdrDllGetClassObject
NdrDllUnregisterProxy
IUnknown_QueryInterface_Proxy
NdrOleFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ