DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d542859ceb7d6ac8eec596b4786b265b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d542859ceb7d6ac8eec596b4786b265b_JaffaCakes118
Size
2.0MB
MD5
d542859ceb7d6ac8eec596b4786b265b
SHA1
adffbbb972916797141cf9c4c1a8b40dcd8f992a
SHA256
84c312ab5810f3b4b327fd789a3b628c1eb8980adc09ffbad2d18cbe91106c85
SHA512
b5066945126873083afac1a5bbc5fc11590b59dae969e76092b8ef804df6b4e8f9a3739bfe86cc21fac147983a18bb36dfc4c7ae49131ef83e69c61ba0490988
SSDEEP
49152:WiqqiMy6chWyTnjz6IhUwVjdTZMqPSu2PKG2:PoJjzbSqPSu2
Checks for missing Authenticode signature.
resource |
---|
d542859ceb7d6ac8eec596b4786b265b_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
GetProcessHeap
SetEndOfFile
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
WideCharToMultiByte
DeleteCriticalSection
FreeLibrary
LoadLibraryW
GetStringTypeW
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapFree
RaiseException
RtlUnwind
GetCommandLineA
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
GetDriveTypeW
FindFirstFileExW
GetCPInfo
GetTimeFormatW
GetDateFormatW
LCMapStringW
HeapAlloc
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteFile
GetModuleFileNameW
GetLocaleInfoW
GetFullPathNameA
CloseHandle
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
GetCurrentDirectoryW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetFullPathNameW
CreateFileW
IsWindow
CoMarshalInterThreadInterfaceInStream
CoUnmarshalInterface
SysFreeString
SysAllocString
VariantClear
VariantInit
SysStringLen
UrlMkSetSessionOption
SHGetFileInfoW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ