DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetTckValue
Static task
static1
Behavioral task
behavioral1
Sample
10249e890e549229869df9adf5227522_JaffaCakes118.dll
Resource
win7-20240708-en
Target
10249e890e549229869df9adf5227522_JaffaCakes118
Size
112KB
MD5
10249e890e549229869df9adf5227522
SHA1
ba2fec53f9850441cdb3759d5070d83d04ba88be
SHA256
a913b89cad66255651134edc23a85b0edc8bf027840916b8e4f2e737493bac56
SHA512
4e62782405280b8350a7ee18f0d6233ab6f33fcf63f77c0cba18324264d02b178f364badef30b0245383db30a2847f7b033652f42c54fc3f82ce4d99eac57743
SSDEEP
1536:0NvBYW4ZbryoyZlPE/fXejHfyvEECT7YF6N2GgyJuiK051iL539ddK:wvaZbrbf26Gxt/51KTK
Checks for missing Authenticode signature.
resource |
---|
10249e890e549229869df9adf5227522_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrStrIA
wnsprintfA
StrSpnA
PathFileExistsA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenA
GetModuleHandleW
WideCharToMultiByte
LeaveCriticalSection
MultiByteToWideChar
lstrlenW
SetThreadLocale
GetThreadLocale
EnterCriticalSection
HeapReAlloc
HeapAlloc
WaitForSingleObject
DeleteCriticalSection
TerminateThread
Sleep
ReleaseMutex
CloseHandle
HeapFree
SetLastError
lstrcpyA
GetSystemTimeAsFileTime
WriteConsoleW
GetConsoleOutputCP
GetModuleHandleA
GetModuleFileNameA
GetLastError
RaiseException
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
CreateFileA
FlushFileBuffers
GetProcessHeap
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CharNextW
CharNextA
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
ShellExecuteA
StringFromGUID2
CoCreateInstance
UnRegisterTypeLi
LoadRegTypeLi
SysAllocStringLen
VariantInit
VariantClear
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetTckValue
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ