DllCanUnloadNow
DllGetClassObject
a
Static task
static1
Behavioral task
behavioral1
Sample
f5145884441df5b6e496b60c7df18982_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f5145884441df5b6e496b60c7df18982_JaffaCakes118
Size
114KB
MD5
f5145884441df5b6e496b60c7df18982
SHA1
5b3d468619379da30b9a6200063da9cf31b1e277
SHA256
4e38ce0aeaee6568b2d3705c7ac30c31a93ee465014b05c74d740026cf75653d
SHA512
8d1a2e97b87c3bed268d2ce04ae885238d35481adbc14b098bbc978c5620f2f56d35a341e34375ab4bb19621a6b1ef7871aed115628bdf7dc410ec8ce4c4025c
SSDEEP
1536:/KqNTKxViP/RKOfA+RP/P2/iHiWTXoZgdCkqLHHRAe78D0/DmKj75t9CiAR:/1mammggMgVe7f/yKj75tU5
Checks for missing Authenticode signature.
resource |
---|
f5145884441df5b6e496b60c7df18982_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrStrIW
StrCpyNW
StrCmpIW
StrStrIA
SHDeleteKeyW
InternetCloseHandle
InternetGetConnectedStateExW
InternetOpenW
InternetOpenUrlW
InterlockedIncrement
Sleep
lstrlenW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
CloseHandle
CreateThread
GetLastError
CreateMutexW
lstrlenA
lstrcpynA
VirtualProtect
GetModuleFileNameW
DisableThreadLibraryCalls
InterlockedDecrement
GetSystemTimeAsFileTime
VirtualAlloc
GetLocalTime
OutputDebugStringA
GetVersionExW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
WideCharToMultiByte
MultiByteToWideChar
CreateFileA
FlushFileBuffers
LCMapStringA
LCMapStringW
SetStdHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetTickCount
HeapDestroy
GetLocaleInfoA
HeapFree
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetConsoleMode
HeapAlloc
HeapReAlloc
HeapSize
RtlUnwind
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
VirtualFree
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetModuleHandleA
SetFilePointer
GetConsoleCP
GetStringTypeW
wvsprintfA
GetSystemMetrics
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegFlushKey
RegCreateKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegEnumKeyW
RegQueryValueW
CoCreateInstance
CoInitialize
VariantClear
VariantInit
SysAllocString
SysFreeString
WSAStartup
inet_addr
gethostbyaddr
DllCanUnloadNow
DllGetClassObject
a
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ