DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3ab731536ece709f4b47f4386f5ed53e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3ab731536ece709f4b47f4386f5ed53e_JaffaCakes118
Size
68KB
MD5
3ab731536ece709f4b47f4386f5ed53e
SHA1
7885881ba848da427433c6401745257ea5e365b3
SHA256
e91c3abce05730789124e7c8310560c59b6c32eb339fb9d115865c1489a78e03
SHA512
be202d38f662eb5389671d2dd5ec5b6fa55728196832ce84f1a7dad505814d449d7f954bb52abcb4867dd6ca61952f0e37cd1b7c88d894d210dfa63038ac85c9
SSDEEP
768:8cXT2hhhQZWP8kkv8nTEUPT2vsB8GSDllW7Nxvn3GGbSccV6:8cj2OoqvET20eGS5613FScc
Checks for missing Authenticode signature.
resource |
---|
3ab731536ece709f4b47f4386f5ed53e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenW
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
lstrcatA
WideCharToMultiByte
GetShortPathNameA
GetModuleHandleA
CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetLocalTime
MultiByteToWideChar
lstrcpyA
ExitProcess
GetStdHandle
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
HeapDestroy
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
HeapReAlloc
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCPInfo
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CharNextA
wsprintfA
RegOpenKeyA
RegQueryValueExA
CoCreateInstance
LoadRegTypeLi
SysStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ