DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0fe306095f22c802ee57475a8d513b3a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
0fe306095f22c802ee57475a8d513b3a_JaffaCakes118
Size
132KB
MD5
0fe306095f22c802ee57475a8d513b3a
SHA1
03230775a6cf6515f739c3acabeae5aecada186a
SHA256
e2c5300744ee900cb630c29bdcde1b9769a26d4d30a332a42aabd1cb36f6b201
SHA512
de75681e60a25e5eb868bc82eb84fc01be4d84f775cb0336af6cc2831c16ee7fc076aa18519d084c083df80aa3669c9d7f6a1192f8bf7a2e04d7d91cdb10b78e
SSDEEP
3072:SWgunWeM6hRLlJMoPBtb1hiRo2acgslGBSSq:TgqVDrb3N2av7
Checks for missing Authenticode signature.
resource |
---|
0fe306095f22c802ee57475a8d513b3a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
CreateFileA
SetFileAttributesA
OpenFileMappingA
CreateFileMappingA
CloseHandle
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetProcAddress
SizeofResource
GetWindowsDirectoryA
LoadLibraryA
GetFileAttributesA
WaitForSingleObject
CreateProcessA
CopyFileA
GetShortPathNameA
OpenMutexA
GetVolumeInformationA
DeviceIoControl
GetSystemTimeAsFileTime
SetFilePointer
GetStringTypeW
FreeLibrary
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
lstrcatA
GetModuleFileNameA
lstrcpyA
lstrcpynA
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemDirectoryA
GetStringTypeA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetCPInfo
GetOEMCP
LCMapStringW
LCMapStringA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
CreateDirectoryA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
CharNextA
GetUserNameA
CreateProcessAsUserA
OpenProcessToken
RegEnumValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
SysAllocString
SysStringLen
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ