DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
efd42f7acb193f9d99e19fa89e4be13c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
efd42f7acb193f9d99e19fa89e4be13c_JaffaCakes118
Size
1.7MB
MD5
efd42f7acb193f9d99e19fa89e4be13c
SHA1
564d37446e6c3224cab8ba40c3f0cbdd64d15596
SHA256
812df19a9f0b8713fd7bfbd76b4ce314b70ec436327047e1389b0c46ee633f27
SHA512
195042ba9a127c5fe2b7149b6dbf434a268c820a876247ca0e60a2a76750c3509f798fff3a9f5d175bfccb951ee769207cb3f0f3e6f5df8340f036c266bd9c45
SSDEEP
49152:pFJ33RM9spImVAjpRZdbcYj1IACTyxyU8qqcotG:XJ3694ImVAjfZO6KZqq
Checks for missing Authenticode signature.
resource |
---|
efd42f7acb193f9d99e19fa89e4be13c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
GetProcAddress
LoadLibraryA
DeleteCriticalSection
ExitThread
InterlockedCompareExchange
LoadLibraryW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDriveTypeA
CreateFileA
GetProcessHeap
WideCharToMultiByte
lstrlenW
GetTickCount
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
HeapCreate
HeapDestroy
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
WriteFile
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetTimeZoneInformation
CloseHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetTimeFormatA
GetDateFormatA
GetFullPathNameW
GetCurrentDirectoryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
SetStdHandle
CreateFileW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CreateThread
TranslateMessage
DispatchMessageW
IsWindow
PeekMessageW
ShowWindow
VariantClear
VarCmp
VariantInit
SysAllocString
SysAllocStringLen
SysFreeString
VarBstrCmp
SysStringByteLen
SysAllocStringByteLen
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ