DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2ce6d979858ca84f3c5fafd913d3fcf4e7c5f28cac8572d3476702203f57da63.dll
Resource
win7-20241010-en
Target
JaffaCakes118_2ce6d979858ca84f3c5fafd913d3fcf4e7c5f28cac8572d3476702203f57da63
Size
939KB
MD5
d62558bff2d2f4a99e0be0ef7eb5d9b4
SHA1
b7c59e0f50f9971eed6a23a7de6fac9bfd5b2d91
SHA256
2ce6d979858ca84f3c5fafd913d3fcf4e7c5f28cac8572d3476702203f57da63
SHA512
c7d36934e5feee48a304cf8e18c8b565ff87531477151b3370edda89783dbf6da2fff87a7187a8b10211522a95a480873ce0c6b3e50d88cd5a4cea52b1745d37
SSDEEP
12288:kvyPTUfrN+lSDLV9dRCYFdVlv6jVBv4w8N6zTlvdEywUshhxmyssuqvY/J9ujv7X:k6Ufgl15qhxmDqvY2leXA
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_2ce6d979858ca84f3c5fafd913d3fcf4e7c5f28cac8572d3476702203f57da63 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ord150
ord111
ord110
ord107
ord3
ord14
ord15
ord16
ord1
ord2
ord9
FlushFileBuffers
SetStdHandle
SetFilePointerEx
EncodePointer
DecodePointer
RaiseException
GetLastError
QueryPerformanceFrequency
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
VirtualAlloc
DisableThreadLibraryCalls
WriteFile
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
lstrcmpiW
MultiByteToWideChar
GetFileSizeEx
GetStringTypeW
SetConsoleCtrlHandler
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
GetConsoleOutputCP
GetConsoleMode
ReadFile
ReadConsoleW
CloseHandle
CreateFileW
WriteConsoleW
FreeLibrary
SetUnhandledExceptionFilter
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
IsDebuggerPresent
OutputDebugStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
RtlUnwind
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetCurrentThread
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
ShowWindow
CharNextW
UnregisterClassW
MessageBoxA
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
StringFromGUID2
LoadTypeLi
UnRegisterTypeLi
VarUI4FromStr
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ