DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
36e80bfa74bdad37ec8fd6e7c735047c_JaffaCakes118.dll
Resource
win7-20241010-en
Target
36e80bfa74bdad37ec8fd6e7c735047c_JaffaCakes118
Size
96KB
MD5
36e80bfa74bdad37ec8fd6e7c735047c
SHA1
865b1fa11ada15663a3e51edd33e28c87a1db976
SHA256
b6190b77e3387355a20c946faa68ccf283807053cdd1c621ba10c63119ee03bb
SHA512
9b950849a9feb33d104edf1ea163a6294a71226582520a6f992824bc5311a20650f4d37c7296f01b88207387732518362fc12e54128857d5fbaf313878202990
SSDEEP
1536:1PQrVfX80a9pyFeTTQ0e3xKPYleysZqJtCZ:erVfX8HmeWUYleysZz
Checks for missing Authenticode signature.
resource |
---|
36e80bfa74bdad37ec8fd6e7c735047c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CloseHandle
SetFilePointer
CreateFileA
GetFileSize
MultiByteToWideChar
FlushFileBuffers
lstrlenA
Sleep
CreateProcessA
GetSystemTime
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
DisableThreadLibraryCalls
lstrcatA
lstrlenW
lstrcmpiA
WriteFile
LocalFree
TlsGetValue
HeapAlloc
HeapSize
GetCPInfo
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
GetStringTypeA
lstrcpyA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
InterlockedDecrement
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
GetEnvironmentVariableA
GetVersionExA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
HeapFree
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
PostMessageA
SendMessageA
FindWindowA
MessageBoxA
LoadStringA
wsprintfA
RegEnumKeyA
RegEnumValueA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
StringFromCLSID
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoDisconnectObject
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
CoInternetGetSession
InternetGetCookieA
ord15
ord30
ord16
ord32
ord18
ord57
ord23
ord21
ord58
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ