DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e23d154e8dbf8af214b4b428cc8b1d4c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e23d154e8dbf8af214b4b428cc8b1d4c_JaffaCakes118
Size
128KB
MD5
e23d154e8dbf8af214b4b428cc8b1d4c
SHA1
27175cf2e6d320678de6986cfcc52af1eb4f8b34
SHA256
42d0a1568330cad33655ed215cbe3f8782c945f4bcd06e0af06377d10e11ae7b
SHA512
05c1ad4011270c5788c0612ddc5959da906b952e843495325db944923607b2ab263eabd4a9b1d22b3e503817fb54b2dc553dfb857ac351cda8b2715e6d9257de
SSDEEP
3072:tH05nWBZ1gGlJa2sPvq29BmVuNqMlFq6e:N00BDaVl9BmOq0E
Checks for missing Authenticode signature.
resource |
---|
e23d154e8dbf8af214b4b428cc8b1d4c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
SetFileAttributesA
CloseHandle
OpenMutexA
GetVolumeInformationA
GetProcAddress
CreateFileA
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
WaitForSingleObject
LoadLibraryA
GetFileAttributesA
CreateProcessA
CopyFileA
GetShortPathNameA
DeviceIoControl
GetSystemTimeAsFileTime
lstrcpyA
lstrcpynA
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
InterlockedExchange
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
GetCPInfo
GetOEMCP
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
CreateDirectoryA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
CharNextA
OpenServiceW
QueryServiceStatus
OpenSCManagerA
CloseServiceHandle
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
SysAllocString
SysStringLen
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ