DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d0f28dfa68f81d6a69ef10cedac12ce9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d0f28dfa68f81d6a69ef10cedac12ce9_JaffaCakes118
Size
364KB
MD5
d0f28dfa68f81d6a69ef10cedac12ce9
SHA1
f9c0e96df71171b773f799e65284dad6a73a551a
SHA256
4058347d35a550c0a22f35bb9e7b0bbf2cde921a4e7b5cef14486d09eab95b57
SHA512
222d0ce126533b54300f0ddbc676e61253bafd3ac16280fbab5509b6d79ee6f3c6687e2a085f5cc5dedd8e91303fc9534af613511ff3bdb1e386199095b4030d
SSDEEP
3072:iip9es/LavgQhkv0KpheqYMRVJuOyCnTFOeYIdTjQjMqgafevfywxLPKMNi/zxt6:iijesOoK0TePsxdaMfys+RZWL9
Checks for missing Authenticode signature.
resource |
---|
d0f28dfa68f81d6a69ef10cedac12ce9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetLastError
RaiseException
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileA
SetEndOfFile
GetModuleFileNameW
GlobalAlloc
CreateThread
Sleep
FormatMessageW
lstrlenW
HeapAlloc
GetProcessHeap
lstrcmpiW
HeapFree
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
LCMapStringW
WriteFile
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
ReadFile
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
UnregisterClassA
CharNextW
MessageBoxW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
CoTaskMemAlloc
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
LoadRegTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
RegisterTypeLi
VarUI4FromStr
SysFreeString
SysAllocString
VariantInit
VariantClear
StrToIntW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ