DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
WinlogonUnlockEvent
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4e7c3751f7ae2842481f755152ccb4f0.dll
Resource
win7-20240903-en
Target
JaffaCakes118_4e7c3751f7ae2842481f755152ccb4f0
Size
399KB
MD5
4e7c3751f7ae2842481f755152ccb4f0
SHA1
445bf10b22f434294cb8161dad406d20a915255d
SHA256
27e867a968e4541338d438fc6fc9bf1fbc2960258bc4242e80a455bbf0c5faeb
SHA512
aeea81250b7c4f9a051cd962d550b3f2f6c5d7b626da6cd0aab51bb4246379ac67743868e4fa9ef5b75cd7453bef7f0e2bba80cb502b529391429b9e668ee153
SSDEEP
12288:r8UjhlSuadXnHk8hlFKIWzyCoG07HQ2V:rHlSu6XHk85KIWzBoG0LQ2V
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_4e7c3751f7ae2842481f755152ccb4f0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateDXGIFactory
GlobalLock
GlobalAlloc
InterlockedDecrement
CloseHandle
SetEvent
OpenEventA
WideCharToMultiByte
lstrlenW
LocalFree
FormatMessageA
CreateMutexA
ReleaseMutex
RaiseException
lstrlenA
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleW
IsDBCSLeadByte
SetLastError
GetModuleHandleA
FindResourceA
LoadLibraryExA
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
ReadFile
GlobalUnlock
GlobalFree
SizeofResource
MultiByteToWideChar
GetLastError
GetSystemPowerStatus
WaitForSingleObject
TerminateProcess
LoadLibraryA
GetProcAddress
GetCurrentProcess
FreeLibrary
GetVersionExA
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
SetFilePointer
GetLocaleInfoA
lstrcmpiA
LoadResource
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
GetStdHandle
WriteFile
ExitProcess
VirtualFree
HeapDestroy
HeapCreate
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
BroadcastSystemMessageA
ChangeDisplaySettingsA
PostMessageA
RegisterWindowMessageA
wsprintfA
CharNextW
CharNextA
FindWindowA
ReleaseDC
EnumDisplayDevicesA
GetDC
GetSystemMetrics
CreateDCA
DeleteDC
GetDeviceCaps
GetSecurityInfo
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityInfo
RegQueryInfoKeyA
RegEnumKeyExW
RegOpenKeyW
RegCreateKeyW
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExA
RegQueryValueExW
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
VarBstrCat
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocStringLen
GetRecordInfoFromGuids
SafeArrayCreateEx
SafeArrayCopy
SafeArrayCreate
SafeArrayRedim
SafeArrayLock
SafeArrayUnlock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString
VariantClear
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
WinlogonUnlockEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE