DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
52af0eef5cd71e48b4be6c6633d94ef4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52af0eef5cd71e48b4be6c6633d94ef4_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
52af0eef5cd71e48b4be6c6633d94ef4_JaffaCakes118
Size
262KB
MD5
52af0eef5cd71e48b4be6c6633d94ef4
SHA1
49d1cb35d83aa5c48031c2d4436eded8a2144f8d
SHA256
a88c69a96622d22faae8c6fceafa5716c52af065f8663af7213de5be3445d572
SHA512
436ca98bf0d1e7c20384ac1fc08f27e6e56be5df155299fd3285603f23e5b30885d29c33ff26a326051e78959cdde017b27b48f1d26ae5758cf0c3bb8a0a6341
SSDEEP
6144:S9+KyWzJb5Mzxo0x32n31lt4cpYWqTOi5+IzFR:S9lyoxal431lmcfcV
Checks for missing Authenticode signature.
resource |
---|
52af0eef5cd71e48b4be6c6633d94ef4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapAlloc
HeapFree
GetProcessHeap
GetLastError
GetProcAddress
LoadLibraryA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
RtlUnwind
VirtualAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ