DllRegisterServer
P8KN6Ry3VDViGrYu4GbA8RiNq
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_1569bc8c2f449a3add40067890288a0c3a57108196655dd1bd177c967d535fcd.dll
Resource
win7-20240903-en
Target
JaffaCakes118_1569bc8c2f449a3add40067890288a0c3a57108196655dd1bd177c967d535fcd
Size
373KB
MD5
d9c1d492f4c42c23990195aa68aeb287
SHA1
808c411243e8bff17bf8c8ef7cc1bffb1f366e63
SHA256
1569bc8c2f449a3add40067890288a0c3a57108196655dd1bd177c967d535fcd
SHA512
73e936ad0a6d6d331fcce3b188b38972e1d4aafae0326d74c97d67f1a16ed1d925e28d3c12e8fc4e3b63ce12e5843e4845b8e07ec2ab25d31b951392e0f901ca
SSDEEP
6144:acVd8OpTvcENUOJkkLDn+ztxqAvmSorinMGRTRSHFaI:lL8kdyJvmSori1T0FaI
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_1569bc8c2f449a3add40067890288a0c3a57108196655dd1bd177c967d535fcd |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
VirtualAlloc
ExitProcess
SetStdHandle
WriteConsoleW
LoadLibraryW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapReAlloc
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
CloseHandle
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapSize
GetLocaleInfoW
GetModuleFileNameW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetLastError
HeapFree
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
FlsGetValue
FlsFree
SetLastError
FlsAlloc
GetProcAddress
GetModuleHandleW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
CreateFileW
UpdateWindow
ShowWindow
CreateWindowExW
LoadStringW
LoadAcceleratorsW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
GetMessageW
LoadIconW
LoadCursorW
RegisterClassExW
DefWindowProcW
DestroyWindow
DialogBoxParamW
BeginPaint
EndPaint
PostQuitMessage
EndDialog
CoTaskMemAlloc
CoLoadLibrary
CoTaskMemFree
DllRegisterServer
P8KN6Ry3VDViGrYu4GbA8RiNq
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ