DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f007ae735baa4be91759ab1b162b989d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f007ae735baa4be91759ab1b162b989d_JaffaCakes118
Size
852KB
MD5
f007ae735baa4be91759ab1b162b989d
SHA1
d7c1550af7bf7cde88169ad043f72e51bacd6104
SHA256
1a121ee492bf4fb441a2a4e71e83345359ee3966a85b4113c15d63f6ed702e86
SHA512
26552680652ad90daaa3991898f5b3d1baf03ea3a05c74ad3aca738a99a35ebccc3925aaa7fce71fd6d323d38f1d7178af2c06bdabe11d46867d8f458ccbc321
SSDEEP
6144:YU+AOE04p2I/S9VEQA27yxKkmuYR74PZw/2pnPE9S:aOn2I8VEZ2y8XR7UZv69
Checks for missing Authenticode signature.
resource |
---|
f007ae735baa4be91759ab1b162b989d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocString
SysFreeString
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrcmpiA
IsDBCSLeadByte
lstrcpynA
HeapDestroy
lstrcpyA
lstrcatA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
IsBadWritePtr
DisableThreadLibraryCalls
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
GetShortPathNameA
IsBadReadPtr
IsBadCodePtr
CloseHandle
UnmapViewOfFile
CreateFileA
CreateFileW
CreateFileMappingA
CreateFileMappingW
MapViewOfFile
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleA
TlsFree
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapSize
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlUnwind
RaiseException
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CharNextA
GetDesktopWindow
IsWindowUnicode
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ