DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2fd45d4b36bad44d218e26a1211b43ca_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2fd45d4b36bad44d218e26a1211b43ca_JaffaCakes118
Size
199KB
MD5
2fd45d4b36bad44d218e26a1211b43ca
SHA1
635c6bc16ae5fa1d0c711b1d9538926c5d156e27
SHA256
4cb1218186ef9fc4ef04917da9f47067d6d15d25c0a49dd1f3d243a0d6e74534
SHA512
f5e6c85f9274b14a301fdc495c57ffd52c0d1cdd7c26d852712cba7fc6a0149111ad8c27977f09f135b531446623645313fd3f90e0bfac5358b23ded8377255b
SSDEEP
3072:jhjwsa+RGDVWmtZs6YP9ioMmxL9czZSb6QSztnPVAa2sSu03ZiYbh:BwsaBVWxL9xcz03sNCa2Zu03YYbh
Checks for missing Authenticode signature.
resource |
---|
2fd45d4b36bad44d218e26a1211b43ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
FlushInstructionCache
GetCurrentProcess
WaitForMultipleObjects
lstrlenA
MultiByteToWideChar
FormatMessageW
LocalAlloc
LocalFree
LoadLibraryW
lstrcpyA
lstrcmpW
GetLocaleInfoW
GetLastError
GetVersionExW
WideCharToMultiByte
lstrcpyW
GetModuleFileNameW
GetComputerNameW
GetModuleHandleW
GetProcAddress
SuspendThread
ResumeThread
WaitForSingleObject
GetCurrentThreadId
CreateThread
Sleep
SetEvent
CloseHandle
CreateEventW
ResetEvent
lstrcpynW
CoInitialize
CoUninitialize
CoCreateInstance
SafeArrayAccessData
VariantInit
SysAllocString
VariantClear
SysStringLen
SysAllocStringLen
SysFreeString
SafeArrayUnaccessData
SafeArrayCreateVector
DispCallFunc
LoadRegTypeLi
StrStrW
StrChrW
StrToIntW
ord57
ord18
ord15
ord32
ord21
ord23
ord30
ord58
ord11
ord10
ord16
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
__CxxFrameHandler
time
strlen
_CxxThrowException
memcpy
_purecall
memcmp
memset
printf
strtol
_except_handler3
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
strchr
free
__dllonexit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_initterm
malloc
_adjust_fdiv
??2@YAPAXI@Z
wsprintfW
wsprintfA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ