DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f6e349516cc3edbe4380a472a676fa1a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6e349516cc3edbe4380a472a676fa1a_JaffaCakes118
Size
236KB
MD5
f6e349516cc3edbe4380a472a676fa1a
SHA1
25c4a67b2e80fe0aa8cf1885396e96d0d17b88ed
SHA256
15d06e8e512c7f422a00f4125f6d4cbc43c38e041d03922f28d22c36a365f326
SHA512
48856bc08bd468bc9fa8f6f50308fa1915d5617e47d03aa56a31059c94a5f38a718959c416d563e668130170c2bfdf21128a8ecc12b9eb83dced99b4f7fb5f47
SSDEEP
3072:aIgiKCpJQm3K6H5cxviEUSpDB/qBu/Rd4DMZL9H0nWUdfTcjfDdC5mVnJ5aj45:Lgi5PlHHIim/znrL9H0nNFj5m4ja
Checks for missing Authenticode signature.
resource |
---|
f6e349516cc3edbe4380a472a676fa1a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalAlloc
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
lstrlenA
lstrcmpiA
lstrlenW
lstrcpyA
GetModuleHandleA
GetModuleFileNameA
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
Sleep
GetTickCount
lstrcatA
GetCurrentProcess
HeapFree
GetProcessHeap
FlushInstructionCache
HeapAlloc
GetCurrentThreadId
GetEnvironmentVariableA
VirtualProtect
VirtualQuery
CloseHandle
ResumeThread
WaitForSingleObject
CreateThread
SetEnvironmentVariableA
FreeLibrary
GetProcAddress
LoadLibraryA
ReleaseMutex
SetEvent
ResetEvent
CreateMutexA
CreateEventA
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpA
GetVolumeInformationA
FlushFileBuffers
SetStdHandle
SetFilePointer
IsBadCodePtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TerminateProcess
SetUnhandledExceptionFilter
LocalFree
GetCurrentProcessId
QueryPerformanceCounter
IsBadWritePtr
VirtualFree
HeapCreate
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCPInfo
GetOEMCP
IsBadReadPtr
GetCommandLineA
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
CreateAcceleratorTableA
GetParent
GetClassNameA
RedrawWindow
GetDlgItem
SetFocus
GetFocus
IsChild
GetWindow
DestroyAcceleratorTable
BeginPaint
EndPaint
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
GetClientRect
FillRect
SetCapture
ReleaseCapture
GetSysColor
GetWindowTextLengthA
GetWindowTextA
SendMessageA
SetWindowTextA
MsgWaitForMultipleObjects
RegisterWindowMessageA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
GetDesktopWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
wsprintfA
GetClassInfoExA
DestroyWindow
GetCursorPos
OffsetRect
GetWindowRect
CallWindowProcA
GetWindowLongA
SetWindowLongA
DefWindowProcA
SetWindowPos
IsWindow
MoveWindow
SetTimer
KillTimer
PostThreadMessageA
ShowWindowAsync
CharNextA
UnregisterClassA
ShowWindow
GetModuleBaseNameA
StrToIntA
StrStrA
PathFindExtensionA
StrCmpNA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ