DllRegisterServer
EWY72
GGX01
QCYZn6747H
QOUXI31
UbLbI7644
Static task
static1
Behavioral task
behavioral1
Sample
bb.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
bb.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
run.bat
Resource
win7-20240903-en
Target
JaffaCakes118_854b4397960a159cc403fc5c774b6212d5ad01fefd88cea653762b9669b06d83
Size
906KB
MD5
679baa8408331d59539565d779c24ef2
SHA1
3c9d589fbd6415e5531604689c870662d12a1ed1
SHA256
854b4397960a159cc403fc5c774b6212d5ad01fefd88cea653762b9669b06d83
SHA512
8e78387151841ac3c8ac062e2ff5c569ccbffac2e9cb7f0dedd619c7b4c58c2edb28466c43201cd8d476b9a0947b21cd64a130c3708b9d03bac584d173099749
SSDEEP
12288:/JLheHnz9VZdYXBLvQLeoIxWkYy+EG1ZK5Vo181Ni1z6MVJWgLZ4sd0gXHG4T8:xLwHz0BLv+RtEB5VOqFMagLZD5s
Checks for missing Authenticode signature.
resource |
---|
unpack001/bb.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FindClose
FindFirstFileA
FindNextFileA
SetFileAttributesA
CloseHandle
GetLastError
HeapAlloc
GetProcessHeap
HeapWalk
WaitForSingleObject
GetCurrentProcessId
ExitProcess
CreateThread
GetCurrentThreadId
GetWindowsDirectoryA
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
CreateFileMappingA
OpenFileMappingA
CreateNamedPipeA
GetComputerNameA
CreateActCtxA
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
GetCurrentActCtx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetCurrentProcess
TerminateProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
GetStdHandle
GetFileType
GetStringTypeW
GetACP
GetTimeZoneInformation
CompareStringW
LCMapStringW
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
RaiseException
HeapSize
HeapReAlloc
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateFileW
DllRegisterServer
EWY72
GGX01
QCYZn6747H
QOUXI31
UbLbI7644
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ