DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e8c2e06d3751fef8ea742647e0afe78c_JaffaCakes118.dll
Resource
win7-20240221-en
Target
e8c2e06d3751fef8ea742647e0afe78c_JaffaCakes118
Size
116KB
MD5
e8c2e06d3751fef8ea742647e0afe78c
SHA1
15f843af59574cd7e9941708d16bab57dee5ad62
SHA256
7de5a13c766fd3e72047455aff666aec5a72ca5bcdc911ec6f30dcfc4e69c295
SHA512
9ac135de57c74c013b01502f15c577944d4acdd0fe9ab9d84375d95c214eaf5009e36a478fee82168f26b50172220996f010eaaa880d6f75ba9e33014207e61d
SSDEEP
3072:hXDrdN+IGew8ahlXBRHg8mle2+muHtx3C:xDBNcoulRR3FTT3C
Checks for missing Authenticode signature.
resource |
---|
e8c2e06d3751fef8ea742647e0afe78c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
WideCharToMultiByte
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrlenA
lstrcmpiA
DisableThreadLibraryCalls
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
lstrcpynA
lstrcpyA
lstrcatA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
MultiByteToWideChar
GetModuleHandleA
ExitProcess
Sleep
CreateThread
CloseHandle
WriteFile
OpenFileMappingA
LockResource
WinExec
LoadLibraryA
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
LoadLibraryExA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
GetTickCount
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
SetUnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
UnhandledExceptionFilter
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
GetEnvironmentStringsW
CharNextA
SendMessageA
GetClassNameA
ShowWindow
EnumChildWindows
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
SysReAllocString
SysStringLen
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ