DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3df44736cee2cf79c99220bd1dba8431_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3df44736cee2cf79c99220bd1dba8431_JaffaCakes118
Size
172KB
MD5
3df44736cee2cf79c99220bd1dba8431
SHA1
5d9e4aeacb16a53d2c82eb1219ce6475ff3e0793
SHA256
a11936090af00304c1a78681b804822956918a6fcdc5ae2d9641c913302552a0
SHA512
3648a8803343829b9ce9921f032378ca6c55f2d75d856b372a1632a76ea918180366f7fac2d48105464e20a7a30a15579247e56a93d519b0bc718219cdb53a82
SSDEEP
3072:amVVrLdqf7eHc3eT07MA/VZfMsiri/HQdY7kNpBKb4D:lrEKlTrAdZnDwd9
Checks for missing Authenticode signature.
resource |
---|
3df44736cee2cf79c99220bd1dba8431_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiA
IsDBCSLeadByte
lstrcpynA
HeapDestroy
lstrcpyA
lstrcatA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
GetShortPathNameA
CompareStringA
IsBadWritePtr
IsBadCodePtr
IsBadReadPtr
CreateFileA
CreateFileW
CreateFileMappingA
CreateFileMappingW
CloseHandle
UnmapViewOfFile
MapViewOfFile
ReadFile
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleA
TlsFree
SetLastError
lstrlenA
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlUnwind
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
TlsGetValue
MultiByteToWideChar
CharNextA
GetDesktopWindow
IsWindowUnicode
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
SysAllocString
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ