DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetTckValue
Static task
static1
Behavioral task
behavioral1
Sample
3cd6843dd609fcf29de0c3d0376c65cb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3cd6843dd609fcf29de0c3d0376c65cb_JaffaCakes118
Size
112KB
MD5
3cd6843dd609fcf29de0c3d0376c65cb
SHA1
5a597cfc21ecacaa1a282b56e60232949f121a9f
SHA256
da7a63fcfc250423e9975e65d4dad5fe538ee7d376d8741afdce2f1a04f9752a
SHA512
c3289da59ec2fddf2c280f7fab1ddf61143309d7b5332a1be68896422f0aff91aa44026ac26e5919a9c75abb432a90779df5943cb3db17b01194e50135ba3caf
SSDEEP
1536:E61ZwJmGLVudgcvQ/GhjjHloTiQDEDLEJJhQS5cVK05+8rpi9db:EIZwJmlo/AUxJJhOV/5+Ld
Checks for missing Authenticode signature.
resource |
---|
3cd6843dd609fcf29de0c3d0376c65cb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wnsprintfA
StrSpnA
SHDeleteKeyA
StrStrIA
PathFileExistsA
DeleteCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenA
GetModuleHandleW
WideCharToMultiByte
LeaveCriticalSection
MultiByteToWideChar
lstrlenW
SetThreadLocale
GetThreadLocale
EnterCriticalSection
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetProcessHeap
TerminateThread
Sleep
ReleaseMutex
CloseHandle
HeapFree
SetLastError
lstrcpyA
GetSystemTimeAsFileTime
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetModuleFileNameA
GetLastError
RaiseException
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
CreateFileA
FlushFileBuffers
WaitForSingleObject
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CharNextW
CharNextA
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
ShellExecuteA
StringFromGUID2
CoCreateInstance
UnRegisterTypeLi
LoadRegTypeLi
SysAllocStringLen
VariantInit
VariantClear
RegisterTypeLi
LoadTypeLi
SysStringLen
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetTckValue
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ