DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
047f274274d34099e8623ec9af2329d4_JaffaCakes118.dll
Resource
win7-20240508-en
Target
047f274274d34099e8623ec9af2329d4_JaffaCakes118
Size
160KB
MD5
047f274274d34099e8623ec9af2329d4
SHA1
b8ef0ecb433f48732be989551dbd19f6e24d6171
SHA256
60d7ac23de19f8d975c6492a2e22db7693636d2902358aa49a99526cdec06af4
SHA512
8634fe4a073bfba8d36b2d4c52ec7db898e0194bbffacc3ec2dfa73f3310e4b819ad21e82ab2f504fe99e15308f7d4ce5615f7acc88f221f7a1c52bd764f1761
SSDEEP
3072:Tp8syDrCQPaRrUdFiPw/MQCEN3V+lzkStuNWm:THSu9Idu9IF+loN
Checks for missing Authenticode signature.
resource |
---|
047f274274d34099e8623ec9af2329d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCloseHandle
InternetQueryDataAvailable
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetGetConnectedState
HttpAddRequestHeadersA
InternetOpenA
GetLastError
VirtualQuery
FreeLibrary
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
lstrcatA
lstrlenA
lstrcpyA
GetTickCount
GetLocalTime
GetVersion
WideCharToMultiByte
lstrcpyW
lstrlenW
GetModuleFileNameA
ReadFile
GetFileSize
TerminateProcess
WaitForSingleObject
CopyFileA
DeleteFileA
Sleep
MultiByteToWideChar
lstrcmpA
VirtualProtect
lstrcpynW
lstrcatW
lstrcmpW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiA
CreateThread
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringA
lstrcpynA
GetStartupInfoA
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
LCMapStringW
HeapSize
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
SetLastError
TlsFree
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapAlloc
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
VirtualAlloc
GetSystemInfo
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
GetCPInfo
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
CharNextA
CharLowerA
wsprintfA
CharUpperW
CharUpperA
UnregisterClassA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCloseKey
ShellExecuteExA
SHGetSpecialFolderPathA
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ