DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientLocid
GetClientTicket
Static task
static1
Behavioral task
behavioral1
Sample
07a638beeef594db8817fbcdd52cdc4b_JaffaCakes118.dll
Resource
win7-20240611-en
Target
07a638beeef594db8817fbcdd52cdc4b_JaffaCakes118
Size
124KB
MD5
07a638beeef594db8817fbcdd52cdc4b
SHA1
55b87bad0924e18450773178481a831dc8b1502c
SHA256
b32536b4497d28c8b1bc64a0503e51b0c0b8b4fead73888e52f21fe4aa9e2282
SHA512
31818e4ba7e7912713ee4f940d42b4a3878f6caf1dc38f97ce00857a96b49b8dc03698be04e40e9fa28a944b2811faea6663f4d1aebb6fbc93faa27fa8ef803b
SSDEEP
1536:q8l3xfwFsFmIlX1wm28cRO1EO6e6/DP+U+lK64DL20ZoeTEp7SPl9c542zyAxrB4:jx91wdf2ElrPK4pZoYWSvc5ZyAxrByh
Checks for missing Authenticode signature.
resource |
---|
07a638beeef594db8817fbcdd52cdc4b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetSetCookieA
InternetGetConnectedState
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetCrackUrlA
PathFileExistsA
StrStrIA
wnsprintfA
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetProcAddress
lstrlenA
lstrlenW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
lstrcmpiA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
HeapReAlloc
HeapAlloc
LoadLibraryA
TerminateThread
HeapFree
GetProcessHeap
MultiByteToWideChar
CloseHandle
GetCurrentProcess
CreateProcessA
WriteFile
CreateFileA
GetTempPathA
lstrcmpA
SleepEx
ReleaseMutex
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
GetVolumeInformationA
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
LCMapStringW
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetLocaleInfoA
LocalFree
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
ExitProcess
CharNextW
CharNextA
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
OpenProcessToken
DuplicateTokenEx
ConvertStringSidToSidW
GetLengthSid
SetTokenInformation
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
LoadRegTypeLi
VarUI4FromStr
SysAllocStringLen
VariantClear
VariantInit
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientLocid
GetClientTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ