CustomDial
RasCustomDial
RasCustomDialDlg
RasCustomEntryDlg
RasCustomHangUp
RegisterCustomDLL
UnregisterCustomDLL
Static task
static1
Behavioral task
behavioral1
Sample
0c3f795ceda4927a0d726f25566ce0b0_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0c3f795ceda4927a0d726f25566ce0b0_JaffaCakes118
Size
124KB
MD5
0c3f795ceda4927a0d726f25566ce0b0
SHA1
7ce2064e94ac541d92f69c0e2b94e8ea33b005ff
SHA256
0c9cbe09a5cbcf863b143cc2fd4f02d554391a0c75e6508cfcad3f26e54ab60a
SHA512
5eabfafe6e3310c947394d01f90b48e2ca79d7ba0193361ef236664d5581b6913289f298f08c7bd79db74829fffed19ce32d9c74733a6c9d7ac7a23308312a67
SSDEEP
3072:YxrFrImJAmr3142OyPRuM//19f77OIck8d73NlRWJ:krFcmB31XOIuMr2Iv+M
Checks for missing Authenticode signature.
resource |
---|
0c3f795ceda4927a0d726f25566ce0b0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
lstrcatA
lstrcmpiA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcpyA
CreateProcessA
CreateEventA
CloseHandle
WaitForMultipleObjects
lstrlenW
WideCharToMultiByte
GetCurrentProcess
GetLastError
GetVersionExA
HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameA
DeleteCriticalSection
GetVersion
InitializeCriticalSection
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
IsBadCodePtr
ExitProcess
LeaveCriticalSection
LocalFree
TerminateProcess
EnterCriticalSection
LocalAlloc
SetUnhandledExceptionFilter
CoInitializeEx
CoUninitialize
FindWindowA
CharPrevA
CharNextA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
PropertySheetA
InitCommonControlsEx
RasGetEntryPropertiesA
CustomDial
RasCustomDial
RasCustomDialDlg
RasCustomEntryDlg
RasCustomHangUp
RegisterCustomDLL
UnregisterCustomDLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE