DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
12b26c5685c100b7647b1f2802f6505e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
12b26c5685c100b7647b1f2802f6505e_JaffaCakes118
Size
41KB
MD5
12b26c5685c100b7647b1f2802f6505e
SHA1
0baafef541fb2045445e81e23872cf805d4f013c
SHA256
c6dc7c747957db7961d47ee7d224c364f434b4e130a8753fa7e8c8e829a6b580
SHA512
cfc4e8e519859a9e9c2a66ce43a05949e986fea8d7f3a1672e4dc0130f79b1bdd1f4d784883363770301781a6a04991a8d3552ad4e50e5c84338342b573f80b8
SSDEEP
768:4gTrL1xJddyW9QtPW1pVHkmTHzHtCo9+QDbUGTs:4S/JGUQtPWhEmTHzHAo4QDbUGTs
Checks for missing Authenticode signature.
resource |
---|
12b26c5685c100b7647b1f2802f6505e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedIncrement
InitializeCriticalSection
DisableThreadLibraryCalls
GetModuleFileNameA
IsBadCodePtr
LoadLibraryA
GetProcAddress
GetCurrentThreadId
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
GetSystemDirectoryA
InterlockedDecrement
RtlUnwind
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
LocalFree
Sleep
InterlockedExchange
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
ord58
ord32
ord57
ord18
ord15
ord16
ord21
ord30
ord31
ord23
MessageBoxA
wsprintfA
CharUpperA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumValueA
SysStringLen
LoadRegTypeLi
SysAllocStringLen
VariantInit
VariantClear
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ