DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d53974957e9b29c78ba5f72c70871f67_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d53974957e9b29c78ba5f72c70871f67_JaffaCakes118
Size
60KB
MD5
d53974957e9b29c78ba5f72c70871f67
SHA1
a8fbf801388bd5fff35ee78e60ac3a24d530e25e
SHA256
5764d6a380876f4f899a41b50d174ea363e63dbf09c2166461f065a8f25d9b88
SHA512
7e7291626b28a63a86bff4bc5516ffdf5554bbd31bc1a82ef3ed1564403c12624093435ebce4e626b2c0917f9f58b738ca5bc4f89daae40fe6b478e570893ed7
SSDEEP
768:jnzWUjZ5gHmmNtw8pjEVTuQvM60h+fBw23eKVno3iCpE:n5EpjEVTum7P22OUo3J
Checks for missing Authenticode signature.
resource |
---|
d53974957e9b29c78ba5f72c70871f67_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiA
SetEvent
lstrcatA
DisableThreadLibraryCalls
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
GetCurrentThreadId
FlushFileBuffers
SetStdHandle
lstrlenW
WideCharToMultiByte
lstrcmpA
CloseHandle
GetTickCount
lstrcpynA
CreateFileMappingA
MapViewOfFile
CreateEventA
GetSystemDirectoryA
GetLastError
GetFileAttributesA
GetCommandLineA
GetVersion
HeapFree
GetCPInfo
GetACP
GetOEMCP
ExitProcess
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapAlloc
TerminateProcess
GetCurrentProcess
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetFilePointer
VirtualAlloc
HeapReAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
EnumThreadWindows
IsWindow
FindWindowA
GetClassNameA
ShellExecuteA
LoadRegTypeLi
SysFreeString
VariantInit
SysStringLen
ord58
ord32
ord57
ord18
ord15
ord16
ord21
ord23
ord31
ord30
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ