DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ff8c5c41f8f0c1b652b68391c72cec74_JaffaCakes118.dll
Resource
win7-20240221-en
Target
ff8c5c41f8f0c1b652b68391c72cec74_JaffaCakes118
Size
132KB
MD5
ff8c5c41f8f0c1b652b68391c72cec74
SHA1
a8f96bdb065f4d946dee09083086c59e2c1fda74
SHA256
9e7e0afbb8ac17c1092411fd7f19c24dab7d50bf3484a62905d4f19e7864ed87
SHA512
6e3f01c9b5ec29a2af2d2681042e74af74851bb31444bb58f9c086ed93324409e41d93e3a19f2d68854a382f82e62142ad003e81f70de17365bc837bc79ac861
SSDEEP
1536:YZtkbvhJiJAYzZU3a4h6dbLAjT5CyHiYpERgypq9cnJc/kOq6o8NkpZ:YYbvhJiJN9U31hIqwicqiO/Zq6o8AZ
Checks for missing Authenticode signature.
resource |
---|
ff8c5c41f8f0c1b652b68391c72cec74_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImmNotifyIME
ImmGetOpenStatus
ImmGetContext
ImmSetConversionStatus
ImmReleaseContext
ShellExecuteA
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
EnterCriticalSection
InterlockedDecrement
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
GetVersion
TerminateProcess
OpenProcess
Process32Next
CloseHandle
Process32First
CreateToolhelp32Snapshot
GetSystemDirectoryA
WinExec
WriteFile
CreateFileA
WaitForSingleObject
GetCurrentThreadId
GetConsoleCP
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
LCMapStringW
LCMapStringA
SetEndOfFile
Sleep
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileAttributesA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ReadFile
SetFilePointer
RtlUnwind
UnhandledExceptionFilter
GetCurrentProcess
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
HeapFree
HeapAlloc
HeapReAlloc
DeleteFileA
CreateThread
TlsSetValue
ExitThread
GetCommandLineA
HeapCreate
VirtualFree
ExitProcess
FatalAppExitA
VirtualAlloc
IsBadWritePtr
TlsAlloc
SendMessageA
SetWindowsHookExA
MessageBoxA
CharNextA
FindWindowExA
IsWindow
EnumThreadWindows
GetClassNameA
CallNextHookEx
SetWindowTextA
GetKeyState
GetFocus
GetWindowTextA
GetWindowLongA
RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
RegEnumValueA
RegSetValueExA
RegDeleteKeyA
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
SysAllocStringLen
VariantCopy
VariantChangeType
VariantClear
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ