DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dcea5aa674b958b5165a203d60fa70df_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dcea5aa674b958b5165a203d60fa70df_JaffaCakes118
Size
512KB
MD5
dcea5aa674b958b5165a203d60fa70df
SHA1
4787e4446e3565cb6c107b7e2de1f22ee32ba46a
SHA256
e4d22b01463a3a1ea8eb58c8419c64af936eeadb2e109b7d3c1c064eabfdcb64
SHA512
3b1cd0a4501cefbfd943b9573830170f049cbb0c50e533bfa12c6e617e9831bb442f32a075f8361e574820a0de048400bb0906f3a7cf3a111ae7361ed7abcb74
SSDEEP
384:DV8nSVbTWAiKSrfEpmAYRumoXozBtERdXC1nw8WQQW/dkDjkoebjDISEWa1gW:MqvWQuWmiYDadXC1nwG9mDjobj8Sw1
Checks for missing Authenticode signature.
resource |
---|
dcea5aa674b958b5165a203d60fa70df_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetConsoleCP
GetModuleHandleA
WriteFile
GetTickCount
ExitProcess
WaitForMultipleObjects
LocalFree
HeapAlloc
GetSystemTimeAsFileTime
EnterCriticalSection
GetStartupInfoA
lstrcmpiW
GetUserDefaultLCID
TlsAlloc
GetCurrentThreadId
GetStringTypeA
RtlUnwind
CreateFileMappingW
SetStdHandle
GetACP
VirtualProtect
LoadResource
WaitForSingleObject
LCMapStringW
GetCommandLineA
GetOEMCP
GetCommandLineW
InterlockedExchange
SetConsoleCtrlHandler
CloseHandle
LZClose
DestroyIcon
SetWindowPos
DestroyWindow
SetWindowTextW
ValidateRect
PostMessageA
SetCursor
wsprintfA
DispatchMessageA
RegOpenKeyExA
RegQueryInfoKeyW
CloseServiceHandle
InitializeAcl
GetObjectA
SelectClipRgn
GetDeviceCaps
malloc
_wtol
CoCancelCall
CoInitializeEx
GetFileVersionInfoW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ