DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2cb76dc8037fff653d5d6be5ebdf99a4_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2cb76dc8037fff653d5d6be5ebdf99a4_JaffaCakes118
Size
132KB
MD5
2cb76dc8037fff653d5d6be5ebdf99a4
SHA1
ac205c4a4bac14f6bb220c6cc8eddfacac42cdd5
SHA256
3c6f41d11c0772207a7cfebc338149054d6dd7ef38b3dc38ece28d459e06611d
SHA512
b151a3c42ee43ab6a75877dbf0a57fa2caf00794a662338c931e2c0c7498de17c17148a5b3694ba37c49a198e1ca1f677e4c85ce701b3e674be1070935f868a6
SSDEEP
3072:wUjuRG5V2TIp4dHK+zhqGIiHUQR9UbZwalwMZbXfAPm:bDoqjeHhUzXYe
Checks for missing Authenticode signature.
resource |
---|
2cb76dc8037fff653d5d6be5ebdf99a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
CloseHandle
GetLastError
CreateFileA
GetFileSize
ReadFile
SetFilePointer
WriteFile
ResumeThread
CreateThread
WaitForSingleObject
CopyFileA
DeleteFileA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetEndOfFile
SetConsoleCtrlHandler
LoadLibraryA
GetStringTypeW
GetStringTypeA
LCMapStringW
LeaveCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
UnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetProcAddress
RtlUnwind
FatalAppExitA
IsBadWritePtr
DeleteCriticalSection
InitializeCriticalSection
lstrcmpiA
WideCharToMultiByte
DisableThreadLibraryCalls
GetModuleFileNameA
OutputDebugStringA
MultiByteToWideChar
GetCurrentThreadId
lstrlenW
LCMapStringA
Sleep
InterlockedExchange
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetLocaleInfoW
SetWindowsHookExA
GetClassNameA
PostMessageA
CallNextHookEx
UnhookWindowsHookEx
GetWindowLongA
SysStringLen
LoadRegTypeLi
SysAllocStringLen
VariantCopy
VariantChangeType
VariantClear
SysFreeString
SysAllocString
inet_addr
htonl
gethostbyname
getpeername
getsockname
inet_ntoa
closesocket
shutdown
listen
bind
setsockopt
socket
accept
select
connect
ioctlsocket
__WSAFDIsSet
send
recv
recvfrom
sendto
htons
ord16
ord30
ord58
ord32
ord57
ord18
ord15
ord21
ord23
ord31
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ