DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e88988d3f294f0e7d1a973f0b9f5ec84_JaffaCakes118.dll
Resource
win7-20240221-en
Target
e88988d3f294f0e7d1a973f0b9f5ec84_JaffaCakes118
Size
156KB
MD5
e88988d3f294f0e7d1a973f0b9f5ec84
SHA1
bae85a6a0d84da66a77157b5b2d265cb8f3fbc39
SHA256
30abd1efbb8b85bc3a6a7ad6ea790a631ccfba002971b89f5ae55b00056b1510
SHA512
bd3498c7aac9f5f748f98f5fc1a7a550f9b676d82720705c689b553f793a40c874d66202f7354755b4af08994bda725c6c96dd921419fc903540538cfeab3aec
SSDEEP
1536:qKr/5BoBckOSE6RsheTNOsqw+tVsoifx1vltyhr0e93Zx7/h4I9w:/5Bozs5Fmfx1vltyasZlWI9w
Checks for missing Authenticode signature.
resource |
---|
e88988d3f294f0e7d1a973f0b9f5ec84_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
lstrcatW
CreateFileA
GetTempPathA
FlushFileBuffers
WriteFile
DeleteFileA
DeviceIoControl
WideCharToMultiByte
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
WriteProcessMemory
lstrcpynW
VirtualProtect
DebugBreak
SetErrorMode
Sleep
OpenEventA
ExitProcess
OutputDebugStringA
LoadLibraryA
GetWindowsDirectoryA
CreateThread
SetUnhandledExceptionFilter
RaiseException
LocalFree
lstrcmpiW
FreeLibrary
InterlockedIncrement
InterlockedDecrement
lstrcpyW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
HeapDestroy
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CloseHandle
GetModuleFileNameW
GetModuleHandleW
GetShortPathNameW
GetCurrentProcess
lstrlenW
SetStdHandle
GetOEMCP
GetACP
IsBadCodePtr
GetStringTypeW
GetStringTypeA
SetFilePointer
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetStdHandle
LCMapStringW
LCMapStringA
HeapSize
TerminateProcess
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
RtlUnwind
SetWindowLongW
CharLowerW
wsprintfA
CharNextW
MessageBoxW
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
SysAllocStringLen
RegisterTypeLi
SysStringLen
LoadRegTypeLi
VarUI4FromStr
SysAllocString
LoadTypeLi
SysFreeString
VariantClear
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ