DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f199d1cb902e8303d2a893f23408ab29_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f199d1cb902e8303d2a893f23408ab29_JaffaCakes118
Size
366KB
MD5
f199d1cb902e8303d2a893f23408ab29
SHA1
422b18ca443867b960e76b0485840ec2aafe7503
SHA256
c99dd15c5b17cb8f314f7067e1f5a6cc87eb54c47627bd8b6012288c5fcefe88
SHA512
ba5eaa1ea3dbbbe6be147ae8dda406c5f97a4113138327f566b7f23c3ae047857dc8e1bb4bd4c94abf6a289a31b6f4aeae32c05619618034a7371c261f573b96
SSDEEP
6144:i3oEiphpUsUxGBTWX9vrYcmUDevh+hV57ykLCLjsq+SfwTBUH4ngTWrbRp+TFN2i:i3oV55NWXtrYKeAL7yk04qPfwTuH4KIi
Checks for missing Authenticode signature.
resource |
---|
f199d1cb902e8303d2a893f23408ab29_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrCmpIW
UrlEscapeW
UrlGetPartW
StrStrIW
PathMatchSpecW
UrlUnescapeW
HttpOpenRequestW
InternetCloseHandle
InternetReadFile
InternetQueryOptionW
HttpQueryInfoW
InternetSetCookieW
InternetOpenW
InternetSetOptionW
HttpSendRequestW
InternetCrackUrlW
InternetConnectW
SetEndOfFile
CreateFileA
GetModuleHandleA
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetCurrentDirectoryA
SetFilePointer
GetDateFormatA
GetTimeFormatA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
IsValidCodePage
GetOEMCP
GetACP
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapReAlloc
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
ExitProcess
HeapSize
GetProcessHeap
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
GetFullPathNameW
GetTempFileNameW
GetFileSize
MapViewOfFile
UnmapViewOfFile
VirtualQuery
CreateFileW
LocalAlloc
CreateFileMappingW
CloseHandle
LocalFree
WaitForSingleObject
TerminateThread
Sleep
SetThreadPriority
GetExitCodeThread
FreeLibrary
WriteFile
GetProcAddress
LoadLibraryA
DeleteFileW
WideCharToMultiByte
lstrlenW
GetTempPathW
GetSystemInfo
GetWindowsDirectoryW
GetVolumeInformationW
CreateMutexW
CreateProcessW
GetTickCount
ReleaseMutex
GetSystemTime
MoveFileExW
SetEnvironmentVariableA
HeapAlloc
GetModuleFileNameW
MultiByteToWideChar
SetLastError
lstrcmpW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
RaiseException
FindFirstFileW
InterlockedDecrement
InterlockedIncrement
GetDriveTypeA
CompareStringA
CompareStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCurrentThreadId
GetCommandLineA
GetSystemTimeAsFileTime
ExitThread
CreateThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
wsprintfW
SetWindowTextW
SetWindowPos
CallWindowProcW
SetWindowLongW
SendMessageW
GetWindowTextW
RealGetWindowClassW
EnumChildWindows
GetWindowLongW
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoCreateGuid
VariantChangeType
VariantCopy
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreateVector
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VarBstrCmp
VariantInit
VariantClear
inet_addr
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
RpcStringFreeW
UuidToStringW
UrlMkGetSessionOption
MapAndLoad
UnMapAndLoad
CryptGetHashParam
CryptDestroyHash
CryptDecrypt
CryptDestroyKey
CryptCreateHash
CryptEncrypt
CryptDeriveKey
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
CryptHashData
SHCreateDirectoryExW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ