DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
046944066fffe84b1b57fc972bb31af4_JaffaCakes118.dll
Resource
win7-20240704-en
Target
046944066fffe84b1b57fc972bb31af4_JaffaCakes118
Size
50KB
MD5
046944066fffe84b1b57fc972bb31af4
SHA1
297a415d6012457286e0287f4175034af4022f93
SHA256
99d1ed764c6bb84bfb8800418e9a89a2aac2164691236ced9aeb558a69ac9693
SHA512
7525c07ff82556b5683502e14ec1588057f082080691f295801da608ff1924a5288e06983b2ba45718017cf994b12ccb5d22aeefbe0e14f4da72abc132baa5ae
SSDEEP
384:TxCCvdd0Qz9CkEgczgVZaXGZCfk28OoLgvRXYlXthsMLZfcVc96YuysOxn5to:TxC69jCACsFOJlYdTkhYfxz
Checks for missing Authenticode signature.
resource |
---|
046944066fffe84b1b57fc972bb31af4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
InterlockedDecrement
SetFileAttributesA
GetFileAttributesA
DisableThreadLibraryCalls
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
lstrcpyA
GetTempPathA
CreateFileMappingA
GetSystemDirectoryA
OpenMutexA
LockResource
FreeResource
LoadResource
SizeofResource
FindResourceA
LoadLibraryExA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
FindClose
FindNextFileA
FindFirstFileA
GetVolumeInformationA
GetCurrentDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcess
GetLastError
LocalFree
MultiByteToWideChar
GetFileSize
ReadFile
CreateFileA
WriteFile
CloseHandle
WideCharToMultiByte
lstrlenA
wsprintfA
SendMessageA
KillTimer
DefWindowProcA
GetDesktopWindow
RegisterClassExA
CreateWindowExA
SetTimer
ShowWindow
PostMessageA
EnumChildWindows
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
CoInitialize
CoCreateGuid
CLSIDFromString
CoUninitialize
SysFreeString
VariantClear
SysAllocStringLen
SysStringLen
LoadRegTypeLi
VariantChangeType
VariantCopy
SysAllocString
ord31
ord32
ord30
ord58
ord15
ord16
ord21
ord23
free
sprintf
strncpy
??1type_info@@UAE@XZ
_mbsstr
??3@YAXPAX@Z
??2@YAPAXI@Z
_strlwr
_purecall
_beginthreadex
_except_handler3
_mbslwr
strstr
memmove
_initterm
_adjust_fdiv
__dllonexit
_onexit
wcslen
_CxxThrowException
malloc
GetModuleFileNameExA
SHDeleteKeyA
Netbios
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ