DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
023e3ac919aab87d9877300c3d5c0ae3_JaffaCakes118.dll
Resource
win7-20240611-en
Target
023e3ac919aab87d9877300c3d5c0ae3_JaffaCakes118
Size
268KB
MD5
023e3ac919aab87d9877300c3d5c0ae3
SHA1
564a9f058d6fe2e6d1d03eceb077854ec0b614da
SHA256
f6c4ee79995bb1876104f57b07f2f272f42da62b045895a6032cd028eca4c267
SHA512
d0f3f030704ab650c272ef4258ffba036e4d76fb148debfc574cf7a357082a1511f894c771406ee026ced41cc6fc4eb2a63dd530a2ed40805aba8aadaafc5cf9
SSDEEP
3072:8lWTzX1XsPZ17ci8BhJ4MOiSt7sZ5nhzJdonlmP46QXMmAI1iwy8i1o3KeEHXT6g:UWTx217whvOiSt7sZTQo4HMKt8oS
Checks for missing Authenticode signature.
resource |
---|
023e3ac919aab87d9877300c3d5c0ae3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WinExec
DisableThreadLibraryCalls
lstrcmpiA
lstrcpyA
lstrlenA
GetModuleFileNameA
GetSystemTime
WriteFile
SetFilePointer
CloseHandle
ReadFile
GetFileSize
CreateFileA
DeleteFileA
GetSystemDirectoryA
CopyFileA
TerminateThread
GetLastError
Process32Next
Process32First
CreateToolhelp32Snapshot
MultiByteToWideChar
GetShortPathNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
InitializeCriticalSection
LeaveCriticalSection
Sleep
HeapDestroy
DeleteCriticalSection
GetProcAddress
LoadLibraryA
lstrcatA
InterlockedIncrement
InterlockedDecrement
LockResource
GetWindowsDirectoryA
FindClose
FindFirstFileA
CompareStringW
CompareStringA
SetEndOfFile
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetTempPathA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleHandleA
CreateThread
lstrlenW
EnterCriticalSection
WideCharToMultiByte
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
SetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
HeapSize
GetCurrentProcess
TerminateProcess
ExitProcess
RaiseException
GetVersion
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
GetLocalTime
GetTimeZoneInformation
InterlockedExchange
DefWindowProcA
CharNextA
PostQuitMessage
LoadIconA
RegisterClassExA
GetSystemMetrics
CreateWindowExA
ShowWindow
wsprintfA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
ShellExecuteExA
SHGetSpecialFolderPathA
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
VariantCopy
SysFreeString
VarUI4FromStr
SysAllocString
VariantChangeType
VariantClear
LoadRegTypeLi
SysStringLen
LoadTypeLi
RegisterTypeLi
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetGetConnectedState
InternetOpenUrlA
timeGetTime
Netbios
PathFileExistsA
WSAStartup
WSACleanup
htons
connect
recv
ntohl
closesocket
socket
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ