DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetTckValue
Static task
static1
Behavioral task
behavioral1
Sample
3ebfa3ae2b9f8cad22cce4ca76d40710_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3ebfa3ae2b9f8cad22cce4ca76d40710_JaffaCakes118
Size
112KB
MD5
3ebfa3ae2b9f8cad22cce4ca76d40710
SHA1
13b9945daa80de40c70817e295d699cded759daf
SHA256
984e9896ec48b32fdc228b0185f83dab06d70f9d89d4be6223722d9a2f543858
SHA512
5722123b6267435a3c5eafeb7edc3fcdab457325118e579b824641b7636030ad19c3b4602cb8cdd0332e7b4cbf036d5fbc429631f5e648bea88943ef6e443451
SSDEEP
1536:1Bf5Zl5yxlqYs0TjYXyjHNy90ct7PbtbAqc5QK05OiL539dFZp:1nZl5ejYE2bP/5OKTD
Checks for missing Authenticode signature.
resource |
---|
3ebfa3ae2b9f8cad22cce4ca76d40710_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrStrIA
wnsprintfA
StrSpnA
PathFileExistsA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenA
GetModuleHandleW
WideCharToMultiByte
LeaveCriticalSection
MultiByteToWideChar
lstrlenW
SetThreadLocale
GetThreadLocale
EnterCriticalSection
HeapReAlloc
HeapAlloc
WaitForSingleObject
DeleteCriticalSection
TerminateThread
Sleep
ReleaseMutex
CloseHandle
HeapFree
SetLastError
lstrcpyA
GetSystemTimeAsFileTime
WriteConsoleW
GetConsoleOutputCP
GetModuleHandleA
GetModuleFileNameA
GetLastError
RaiseException
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
CreateFileA
FlushFileBuffers
GetProcessHeap
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CharNextW
CharNextA
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
ShellExecuteA
StringFromGUID2
CoCreateInstance
UnRegisterTypeLi
LoadRegTypeLi
SysAllocStringLen
VariantInit
VariantClear
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetTckValue
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ