DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fc6f64a661cac8be739aa3fd05f9c922_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fc6f64a661cac8be739aa3fd05f9c922_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fc6f64a661cac8be739aa3fd05f9c922_JaffaCakes118
Size
132KB
MD5
fc6f64a661cac8be739aa3fd05f9c922
SHA1
c8719644f8d31af0a7e9461fa56aefcf2e6708a4
SHA256
1d7a368963dadba1f8d705444ac17d3971eae93b7863fbeeaf810c0a499bd925
SHA512
b55a798f6db326bcb3d81f7c648128087ba573b0f2b6d4f42e2f47aeb515979b381c65afea998016f9d6c535811dd5b936d22da73b2e005661d905cd119f3454
SSDEEP
3072:9+NggyYG9T1uYGPYG+5FITBfCH2Y3l000Hb:TYGT2AG+TITBqjK5
Checks for missing Authenticode signature.
resource |
---|
fc6f64a661cac8be739aa3fd05f9c922_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCloseHandle
lstrlenW
lstrcmpiA
GetThreadLocale
FreeLibrary
IsDBCSLeadByte
LoadLibraryExA
GetModuleHandleA
GetLastError
GetModuleFileNameA
RaiseException
lstrcpynA
GetSystemDirectoryA
GetPrivateProfileStringA
DeleteFileA
CreateFileA
CloseHandle
ReadFile
WriteFile
WritePrivateProfileStringA
GetFileAttributesA
CreateDirectoryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
FindResourceA
SizeofResource
LoadResource
DisableThreadLibraryCalls
lstrcatA
lstrcpyA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
SetCurrentDirectoryA
GetCurrentDirectoryA
SetFilePointer
SetEndOfFile
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
InterlockedExchange
GetVersionExA
GetLocaleInfoA
GetACP
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetOEMCP
GetCPInfo
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
UnhandledExceptionFilter
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
ExitProcess
RtlUnwind
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapCreate
VirtualFree
IsBadWritePtr
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
CharNextA
RegQueryValueExA
RegOpenKeyExA
GetUserNameA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegSetValueExA
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
RegisterTypeLi
UnRegisterTypeLi
SysAllocString
LoadTypeLi
SysFreeString
VarUI4FromStr
PathFileExistsA
PathFindExtensionA
StrStrIA
StrChrIA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ