DllInstall
__apicall
_init
_uninstall
serv
Static task
static1
Behavioral task
behavioral1
Sample
0ab01319837f501afde3f2d1c1c64b73_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ab01319837f501afde3f2d1c1c64b73_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0ab01319837f501afde3f2d1c1c64b73_JaffaCakes118
Size
1.5MB
MD5
0ab01319837f501afde3f2d1c1c64b73
SHA1
5577b53515989429a6e0b2778ab8a1074c535ebc
SHA256
a4763fd2d0197646192d76abb47609d36e0da2b45c599b28fafbdda12e9ca2ed
SHA512
1b7994c12fdec0b5d039a6d0270fa29eaff74c5dbebcaf8bf18bf9ed9a658d2c9ce8723ce4e74ff69893a4e6c2ac521571e396dc3d2188b84b867dc5a19dfd91
SSDEEP
24576:6e9Zd366UnMOJkE/9VYjE4X4IvTYxiftGsmHSDNvlE6+9vffmUqbHh5:6e9zZ6Mm9VuE4IU8xGwsYSDNtE6evff
Checks for missing Authenticode signature.
resource |
---|
0ab01319837f501afde3f2d1c1c64b73_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
VirtualFree
GetProcessHeap
HeapAlloc
HeapFree
LoadLibraryA
GetLastError
GetTickCount
GetProcAddress
GetModuleHandleA
Sleep
GetModuleFileNameW
GetEnvironmentVariableW
GetTempPathW
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
InterlockedDecrement
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
GetStdHandle
WriteFile
HeapSize
RaiseException
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
SetLastError
WideCharToMultiByte
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
HeapReAlloc
RtlUnwind
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle
DllInstall
__apicall
_init
_uninstall
serv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ