DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fb9e7feac2e8075a719bdd4ce3b0a82a_JaffaCakes118.dll
Resource
win7-20240221-en
Target
fb9e7feac2e8075a719bdd4ce3b0a82a_JaffaCakes118
Size
472KB
MD5
fb9e7feac2e8075a719bdd4ce3b0a82a
SHA1
cb5c4bbd1731fa043fbd694d71fb392b2cc1a80a
SHA256
d003646366195033506325818499b12f21d3b06d196b057bce1af478bb506817
SHA512
cb21cff18594e333504b3b261aab99294b22d5db576ea267133c29eb06f9dc43da510c0870b2ec3a6dc6972b5bf10422160ccfe4bf9b7b230d92ae390a9e81be
SSDEEP
12288:TC4sUqXfFHoWurc+uVwRISkQx8I/BTAr:+ppVduA+ua9kQx8wBTA
Checks for missing Authenticode signature.
resource |
---|
fb9e7feac2e8075a719bdd4ce3b0a82a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
LoadLibraryW
GetProcAddress
lstrlenW
WideCharToMultiByte
GetLastError
lstrcmpiW
MultiByteToWideChar
GetModuleHandleW
RaiseException
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
GetThreadLocale
SetThreadLocale
FindResourceW
CreateFileW
WriteFile
CloseHandle
WinExec
OpenProcess
lstrlenA
GetExitCodeThread
Sleep
TerminateThread
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
GetLocaleInfoW
IsValidCodePage
LockResource
LoadResource
SizeofResource
FreeLibrary
LoadLibraryExW
GetTickCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetWindowsDirectoryW
InitializeCriticalSection
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
GetFileType
VirtualAlloc
FatalAppExitA
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
HeapSize
GetCurrentThread
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetProcessHeap
GetVersionExA
GetCommandLineA
GetCurrentThreadId
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
LCMapStringA
RtlUnwind
LoadLibraryA
InterlockedExchange
SetConsoleCtrlHandler
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
HeapFree
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CharLowerW
PostMessageW
CharLowerA
CharNextW
UnregisterClassA
MessageBoxW
IsTextUnicode
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
SHGetFolderPathW
CoTaskMemAlloc
CoGetClassObject
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
UnRegisterTypeLi
SysAllocStringLen
SysFreeString
VarUI4FromStr
SysAllocString
SysStringByteLen
SysAllocStringByteLen
SysStringLen
LoadRegTypeLi
LoadTypeLi
VarBstrCat
VariantClear
RegisterTypeLi
VarBstrCmp
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrStubForwardingFunction
NdrOleAllocate
NdrCStdStubBuffer_Release
NdrDllRegisterProxy
NdrDllCanUnloadNow
IUnknown_Release_Proxy
NdrCStdStubBuffer2_Release
IUnknown_AddRef_Proxy
NdrDllGetClassObject
NdrDllUnregisterProxy
InternetCrackUrlW
InternetGetCookieW
InternetSetCookieW
InternetCloseHandle
InternetOpenW
InternetReadFile
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
CoInternetGetSession
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ