DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
52e6667aebd7cb0ef3e6738dbd5e6394_JaffaCakes118.dll
Resource
win7-20240903-en
Target
52e6667aebd7cb0ef3e6738dbd5e6394_JaffaCakes118
Size
1.3MB
MD5
52e6667aebd7cb0ef3e6738dbd5e6394
SHA1
cf85490ef2c25798a3bed711e8a3238bc056afff
SHA256
6dbf889826de306e3759d83f4f1b51372dcc4428079c59215860d7d9fc966060
SHA512
41083c5dd1f3c3a632d4751380e9d5ad0bc96e29d937241e2dabede0da8c8f0a83ecf717d7db92915bad22e16cb765985f3eac15c1a65391665e2b6fc4344658
SSDEEP
24576:BhRAJz0JXmGKSrhZw+bm9iF/BxfW0A9z4cgSwdh2LB0WWTdTUHnjg:u3U7BcT02dWT5UHnjg
Checks for missing Authenticode signature.
resource |
---|
52e6667aebd7cb0ef3e6738dbd5e6394_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
MultiByteToWideChar
GetCurrentThreadId
ExitThread
InterlockedCompareExchange
LoadLibraryW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDriveTypeA
CreateFileA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetStdHandle
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetTickCount
Sleep
InterlockedExchange
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetCommandLineA
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapAlloc
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
WriteFile
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetTimeZoneInformation
CloseHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetTimeFormatA
GetDateFormatA
GetFullPathNameW
GetCurrentDirectoryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
CreateThread
IsWindow
SetWindowTextW
SendMessageW
GetWindowTextW
CharLowerW
CharUpperW
wsprintfW
ShowWindow
SetWindowPos
SystemParametersInfoW
SetWindowLongW
CallWindowProcW
GetWindowLongW
CoMarshalInterThreadInterfaceInStream
CoUnmarshalInterface
VariantClear
VarCmp
VariantInit
SysAllocString
SysFreeString
VarBstrCmp
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ