DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
de56a53e4ec077d3c4642e0ac142b9d2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
de56a53e4ec077d3c4642e0ac142b9d2_JaffaCakes118
Size
58KB
MD5
de56a53e4ec077d3c4642e0ac142b9d2
SHA1
6c83901e74205a6ce38e0f83a106b9db1596af4c
SHA256
b6b8f8b5ed7982a1ca1476e734a8d7bde2bf20eb59e12657376581c99d63f4eb
SHA512
d861d7dc6ea18fb0172e68ce504485c58018abf9c6b02c21ecfb558d2eaecf90e051b156eaaa3c1aaae82cc0c0e635b771e53cf16a9a3cbd385e4198b45902ea
SSDEEP
768:f33DNvbFj+HchLPXM9Ljn9hgfh3PfpOcOwVMZEcPGf2avqi7dOQMRH81nXTW5v93:f3DZlUpj9hgfh3Pfplcu1vqxDHkna9E
Checks for missing Authenticode signature.
resource |
---|
de56a53e4ec077d3c4642e0ac142b9d2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathFileExistsA
PathAddBackslashA
SHSetValueA
PathFindExtensionA
UuidCreate
GetLastError
MultiByteToWideChar
WideCharToMultiByte
RaiseException
InitializeCriticalSection
DeleteCriticalSection
lstrcatA
lstrlenA
GetModuleFileNameA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
CloseHandle
InterlockedIncrement
InterlockedDecrement
lstrcmpiA
CreateFileA
SetFilePointer
SetEndOfFile
GetTempFileNameA
GetTempPathA
DeleteFileA
MapViewOfFileEx
CreateFileMappingA
GetFileSize
OpenFileMappingA
UnmapViewOfFile
HeapFree
lstrcpyA
DisableThreadLibraryCalls
ReleaseMutex
WaitForSingleObject
CreateMutexA
IsDBCSLeadByte
lstrcpynA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetProcAddress
LoadLibraryA
FindClose
FindNextFileA
FindFirstFileA
GetVersionExA
GetProcessHeap
WriteFile
LockFile
CreateProcessA
GetLocaleInfoA
lstrcmpA
ReadFile
GetPrivateProfileStringA
WritePrivateProfileStringA
GetSystemTimeAsFileTime
InterlockedExchange
HeapReAlloc
RtlUnwind
VirtualQuery
HeapAlloc
GetTickCount
UnlockFile
PeekMessageA
DispatchMessageA
MsgWaitForMultipleObjects
CharNextA
wsprintfA
GetUserNameA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
SHGetSpecialFolderPathA
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
VariantInit
VariantClear
VariantChangeType
VariantCopy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
LoadRegTypeLi
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ