DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
577928ae0ff3c57bae7bf7b1aff58e11_JaffaCakes118.dll
Resource
win7-20241010-en
Target
577928ae0ff3c57bae7bf7b1aff58e11_JaffaCakes118
Size
234KB
MD5
577928ae0ff3c57bae7bf7b1aff58e11
SHA1
57a2df041a933099cc1be11a80a197a25e36667a
SHA256
ad0a8bc28cbbb766d19ee52aec1d8dbd07e040ffb9ea644e5441d9052ca0b17a
SHA512
eb0cbf554c4ee776eff7a55d5afd4fb7f679cf4965140b47727fcc755ad6b031015a7c8bba44db33cb284c7bcb6bbc56748f180e01672048e67757bbb9ffc26d
SSDEEP
3072:OW699lHZihAqlBCkdvzh7jPMQC+qyQLTUcM/HuctN08k9Zdui9Rv07nk7BfyRa/O:v69HHI3Cu536eZlhORUUV/bs33b
Checks for missing Authenticode signature.
resource |
---|
577928ae0ff3c57bae7bf7b1aff58e11_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
lstrlenA
lstrcmpiA
lstrlenW
lstrcpyA
GetModuleHandleA
GetModuleFileNameA
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
Sleep
GetTickCount
lstrcatA
HeapFree
GetProcessHeap
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetCurrentThreadId
GetEnvironmentVariableA
CloseHandle
ResumeThread
WaitForSingleObject
CreateThread
SetEnvironmentVariableA
FreeLibrary
GetProcAddress
LoadLibraryA
GetLargestConsoleWindowSize
GetHandleInformation
GetGeoInfoW
GetGeoInfoA
GetFullPathNameW
GetFullPathNameA
GetFirmwareEnvironmentVariableW
GetFirmwareEnvironmentVariableA
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesExA
GetFileAttributesW
GetFileAttributesA
FileTimeToLocalFileTime
GetSystemInfo
GetComputerNameA
IsBadReadPtr
CreateMemoryResourceNotification
WriteProfileSectionA
EscapeCommFunction
ReleaseMutex
SetEvent
ResetEvent
CreateMutexA
CreateEventA
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpA
GetVolumeInformationA
LocalAlloc
LocalFree
HeapDestroy
HeapReAlloc
HeapSize
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
VirtualQuery
GetCommandLineA
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetFilePointer
SetStdHandle
FlushFileBuffers
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ