DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2a57efa786eb5c5386dbd825110a2ec9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2a57efa786eb5c5386dbd825110a2ec9_JaffaCakes118
Size
108KB
MD5
2a57efa786eb5c5386dbd825110a2ec9
SHA1
2fc3421dd6538a048fa76463cc6cd397ba7ef757
SHA256
965e6555b9323e83890190bc4cf5092a55dee9a8d5e8805ef0cf2af9ee624a93
SHA512
1fd96644ea04c5289d1a637ea22edcba7b8c3a864dc3de047b855ed4cabac184a19f8496d6028db8b394e8887257df328b27de869ab64ca53bf7140528d42a5c
SSDEEP
3072:Q9r4dWGbEo3JwGimhAl0guDY70shWLkcaU:Q+d/ZqGVDzshW
Checks for missing Authenticode signature.
resource |
---|
2a57efa786eb5c5386dbd825110a2ec9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegFlushKey
RegQueryValueExA
DeleteCriticalSection
lstrlenW
lstrcatA
lstrlenA
lstrcpyA
LeaveCriticalSection
EnterCriticalSection
SystemTimeToFileTime
GetLocalTime
CompareFileTime
lstrcmpA
lstrcpynA
InitializeCriticalSection
DisableThreadLibraryCalls
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
InterlockedIncrement
InterlockedDecrement
FlushInstructionCache
GetCurrentProcess
MultiByteToWideChar
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
CreateThread
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
DebugBreak
HeapReAlloc
HeapFree
GetSystemDirectoryA
GetUserDefaultLangID
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetDriveTypeA
GetFileAttributesA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
SetLastError
WaitForMultipleObjects
SetEvent
ResetEvent
SetThreadPriority
ResumeThread
CreateEventA
GetCurrentThreadId
GetCurrentProcessId
FreeLibrary
CoCreateGuid
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
VariantClear
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeTypeEx
CharNextA
wsprintfA
GetWindowLongA
SetWindowLongA
GetClassNameA
CallWindowProcA
CreateWindowExA
RegisterClassExA
LoadCursorA
GetClassInfoExA
GetKeyboardType
UnregisterClassA
GetWindowThreadProcessId
DestroyWindow
EnumWindows
DefWindowProcA
PostMessageA
IsWindow
PeekMessageA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ