DllRegisterServer
GetExtensionVersion
HttpExtensionProc
drtffDWEUFEUFUWEGFUYBG
Static task
static1
Behavioral task
behavioral1
Sample
4013945c4997c0c02b6d094186dde0ae4fa499bc33afae5bbbc0207f2754fe39.dll
Resource
win7-20240903-en
Target
JaffaCakes118_7f671c53c8376b91afc85d07b93c80828519791a9a906dd304606ba407146cf0
Size
273KB
MD5
f0bbe04eb5d1e80d61b13357b2195b48
SHA1
f00f86a8cbed9f8545be9648f622b90614bada42
SHA256
7f671c53c8376b91afc85d07b93c80828519791a9a906dd304606ba407146cf0
SHA512
daa928fa686bea722de596f0b651c3bc28002127c6ef7cc7e95c92c166a5503bbb282a612fad3f1444da9c158cb1a28a66a2e4a0d66eabe8ca34a0444520d508
SSDEEP
6144:tXsyvN9cuozrzJyiWqSkCbSfc1YRWeLXlMh1xMGlwJ1nWG23dFPc:9n19dy0inc5W1GfHc1WGMdFU
Checks for missing Authenticode signature.
resource |
---|
unpack001/4013945c4997c0c02b6d094186dde0ae4fa499bc33afae5bbbc0207f2754fe39.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MapViewOfFile
CreateFileMappingA
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
VirtualAlloc
UnmapViewOfFile
LockResource
LoadResource
SizeofResource
FindResourceA
LoadLibraryA
FreeResource
CloseHandle
RtlUnwind
RaiseException
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapFree
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
IsBadWritePtr
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
GetLocaleInfoW
InterlockedIncrement
InterlockedDecrement
FlushFileBuffers
SetFilePointer
SetStdHandle
ReadFile
CryptAcquireContextA
DllRegisterServer
GetExtensionVersion
HttpExtensionProc
drtffDWEUFEUFUWEGFUYBG
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ