DllMain
GetUserInfo
IsCompaqNETUser
IsExistingAnyIAUser
IsMSNIAUser
Migrate
MigrateEx
MigrateRunDll32
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_43f2784b993ad29c4b3ab1d5d6852c4d.dll
Resource
win7-20240903-en
Target
JaffaCakes118_43f2784b993ad29c4b3ab1d5d6852c4d
Size
152KB
MD5
43f2784b993ad29c4b3ab1d5d6852c4d
SHA1
f9cd5187929a5fab63c4669cfe3e311c56f5a8f6
SHA256
c9267e7100d5ad11be8bed773e833b3486441a8bf52d347729916e22c05345f8
SHA512
54d49ce6ac13da0f92892c5ecf62d1596bc02474294a80fa2073e3d7bb827177f2316aad561ba777889d3ac280f5eea9c3bfa1708880decde1a9fd48f0ceda23
SSDEEP
3072:QKkvGB5t2mbFyYVHcTR3O0Bolb213QRD9+EctUe:QKkvmzpJLmBolb213QlYrtUe
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_43f2784b993ad29c4b3ab1d5d6852c4d |
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
RemoveDirectoryA
FindClose
lstrcmpA
FindNextFileA
CreateProcessA
SetFileAttributesA
GetFileAttributesA
GetPrivateProfileSectionA
CopyFileA
GetTempPathA
GetModuleFileNameA
GetWindowsDirectoryA
GetExitCodeProcess
ExpandEnvironmentStringsA
LocalFree
Sleep
GetTickCount
LocalReAlloc
LocalAlloc
OpenMutexA
CreateFileA
IsDBCSLeadByte
WideCharToMultiByte
GetPrivateProfileIntA
GetPrivateProfileStringA
LoadLibraryA
GetProcAddress
HeapFree
WaitForSingleObject
GetProcessHeap
DeleteCriticalSection
GetVersion
InitializeCriticalSection
RtlUnwind
RaiseException
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
DisableThreadLibraryCalls
ExitProcess
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
EnterCriticalSection
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
CloseHandle
lstrcmpiA
LoadLibraryExA
FindFirstFileA
DeleteFileA
HeapAlloc
FreeLibrary
GetLastError
lstrcpyA
FormatMessageA
lstrcatA
lstrlenA
WriteFile
lstrcpynA
InterlockedIncrement
TlsGetValue
GetVersionExA
PostMessageA
wsprintfA
CharNextA
wvsprintfA
DispatchMessageA
FindWindowA
SendMessageA
PeekMessageA
TranslateMessage
RegEnumKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
SHGetPathFromIDListA
SHChangeNotify
SHGetMalloc
SHGetSpecialFolderLocation
CoUninitialize
CoCreateInstance
CoInitialize
SysFreeString
DllMain
GetUserInfo
IsCompaqNETUser
IsExistingAnyIAUser
IsMSNIAUser
Migrate
MigrateEx
MigrateRunDll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE