DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1452fabc5a87efe481f6231184984056_JaffaCakes118.dll
Resource
win7-20240903-en
Target
1452fabc5a87efe481f6231184984056_JaffaCakes118
Size
328KB
MD5
1452fabc5a87efe481f6231184984056
SHA1
564a9c7073788509498dbb3a30a3abdba93535e8
SHA256
a4b03b4c6554594ab067d5d5096e5c9059e2835cfb8617cbb08247ac185f2011
SHA512
f427776c291a336891d8c4035f9d5240178749c0b3f67c0aae88305943c8b813a88de3e98ac072be513e05133f84bc19e739a3556e3d4e4117cf2d68c3603cc4
SSDEEP
6144:ueuKc2MvC6nI6ysyvtdsCe1psrAxWM6LZxKKzCcZRnultlfH:ueuKX6nI6ys0KCGs0xWBPCcZRurtH
Checks for missing Authenticode signature.
resource |
---|
1452fabc5a87efe481f6231184984056_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
GetShortPathNameA
GetModuleHandleA
lstrlenW
lstrcmpiA
HeapDestroy
CloseHandle
UnmapViewOfFile
ReadFile
CreateFileA
QueryPerformanceFrequency
CreateEventA
GetFileSize
FindClose
FindFirstFileA
GetFileAttributesA
WaitForSingleObject
SetEvent
FreeLibrary
LoadLibraryA
GetProcAddress
GetLocalTime
GetCurrentProcessId
GetVersion
GetWindowsDirectoryA
lstrcatA
lstrcpynA
WriteFile
Sleep
SetFilePointer
CompareStringA
lstrlenA
GetVersionExA
MapViewOfFile
CreateFileMappingA
VirtualQuery
VirtualProtect
SearchPathA
lstrcpyA
ResetEvent
GetTickCount
QueryPerformanceCounter
SystemTimeToFileTime
TerminateProcess
FlushFileBuffers
SetStdHandle
IsBadCodePtr
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
InterlockedDecrement
LocalFree
InterlockedIncrement
FormatMessageA
WideCharToMultiByte
SetLastError
CompareStringW
GetLastError
IsBadReadPtr
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
GetCurrentProcess
TlsGetValue
TlsFree
TlsAlloc
SetUnhandledExceptionFilter
ExitProcess
HeapAlloc
HeapFree
GetCommandLineA
ExitThread
TlsSetValue
GetCurrentThreadId
CreateThread
RtlUnwind
RaiseException
InterlockedExchange
wsprintfA
LoadStringA
GetDesktopWindow
DispatchMessageA
MsgWaitForMultipleObjects
CharLowerBuffA
TranslateMessage
PeekMessageA
PostThreadMessageA
GetMessageA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
StringFromCLSID
CoCreateInstance
CLSIDFromProgID
CoGetInterfaceAndReleaseStream
CoUninitialize
CoMarshalInterThreadInterfaceInStream
CoInitialize
ProgIDFromCLSID
CoTaskMemFree
SysAllocString
VariantClear
VariantInit
VariantCopy
GetErrorInfo
SysStringByteLen
SysAllocStringByteLen
DispGetParam
VariantCopyInd
SafeArrayCreate
SafeArrayGetElement
SafeArrayPutElement
LoadRegTypeLi
CreateErrorInfo
SetErrorInfo
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SysAllocStringLen
SafeArrayDestroy
SysFreeString
SysStringLen
SysReAllocStringLen
VariantChangeType
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE