DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ff8e0d97573dc835424eebdf301fe0f9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ff8e0d97573dc835424eebdf301fe0f9_JaffaCakes118
Size
332KB
MD5
ff8e0d97573dc835424eebdf301fe0f9
SHA1
bdc5a582ff92f449ef1a883673d03496d54be84f
SHA256
b43c99326b871ce1660f6161a1997049ad26fab0acd00251db27a077ce7d4124
SHA512
5d6c3732ae988ead13e72f810c13fd020684f9ff14b6787e7a46a68ecc9862164de6b1ed0daf5eef709e761298f199281722d66a3088a5b615de9b102edde9b5
SSDEEP
3072:OX2oB4ZtoRiMJYOt7GgA20GK7LyfYRD8gva1uNsZ052ROR6BbjXVuF0KRcZWtMSw:s2oB4Z6iMJFQX20GIyD1ukIatQ3WbSw
Checks for missing Authenticode signature.
resource |
---|
ff8e0d97573dc835424eebdf301fe0f9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedDecrement
GetModuleHandleW
GetLastError
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
DeleteCriticalSection
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileA
SetEndOfFile
WriteConsoleW
InitializeCriticalSection
GetModuleFileNameW
GlobalAlloc
CreateThread
Sleep
FormatMessageW
lstrlenW
LocalAlloc
RaiseException
LocalFree
GetConsoleOutputCP
WriteConsoleA
CreateFileW
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
HeapAlloc
HeapFree
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
LCMapStringA
WideCharToMultiByte
LCMapStringW
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
ReadFile
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
UnregisterClassA
ShowWindow
CharNextW
MessageBoxW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
CoTaskMemAlloc
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
UnRegisterTypeLi
RegisterTypeLi
SysStringLen
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysFreeString
SysAllocString
VariantClear
VariantInit
StrToIntW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ