DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
03e467ef28e56d25a83ee7849a942aca_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
03e467ef28e56d25a83ee7849a942aca_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
03e467ef28e56d25a83ee7849a942aca_JaffaCakes118
Size
376KB
MD5
03e467ef28e56d25a83ee7849a942aca
SHA1
81fe37ad0ce3a474349b8c93c3a3a912fd8dbc07
SHA256
d787c84230e4de23a12da642a52526dabdaadc6c0e73b37a02c551acff1320f2
SHA512
1fea04efb19cbccf088862fcd4d19ddcf31b32f81504239243754a5588388322501456e8ce3d8a0807b5553e937909fe77c80c97f0f1210cf49ec26b9b5313c3
SSDEEP
6144:7mmLVX+Pjq7QOJDd3H+UMGNwX4SvsJUJJS:7Ajq7f9VSX4G/JS
Checks for missing Authenticode signature.
resource |
---|
03e467ef28e56d25a83ee7849a942aca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetProcAddress
LoadLibraryA
HeapDestroy
lstrcpyA
lstrcatA
Sleep
CloseHandle
GetCurrentThreadId
GetTickCount
WriteFile
CreateFileA
ReadFile
GetFileSize
GetVersionExA
GetSystemDirectoryA
TerminateThread
CreateThread
IsValidCodePage
LoadResource
FindClose
CreateDirectoryA
FindFirstFileA
GetCurrentProcessId
GetComputerNameA
FindNextFileA
LocalFree
LocalAlloc
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetLocalTime
HeapFree
HeapAlloc
GetProcessHeap
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
SizeofResource
FreeLibrary
WideCharToMultiByte
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
DisableThreadLibraryCalls
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DeleteFileA
IsValidLocale
SetConsoleCtrlHandler
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
RaiseException
ExitThread
TlsSetValue
HeapReAlloc
RtlUnwind
GetCommandLineA
GetVersion
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
GetEnvironmentVariableA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ExitProcess
FatalAppExitA
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
SetUnhandledExceptionFilter
GetSystemTime
wsprintfA
PostThreadMessageA
LoadStringA
PeekMessageA
CharNextA
DispatchMessageA
TranslateMessage
CryptReleaseContext
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoUninitialize
CoInitializeEx
ProgIDFromCLSID
CLSIDFromProgID
OleRun
CLSIDFromString
VariantChangeType
VariantTimeToSystemTime
VariantInit
VariantCopy
SysStringByteLen
SysAllocStringByteLen
VectorFromBstr
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayDestroy
CreateErrorInfo
SetErrorInfo
VariantClear
SysAllocStringLen
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
GetErrorInfo
getservbyname
htonl
inet_ntoa
WSASetLastError
htons
inet_addr
gethostbyname
shutdown
closesocket
setsockopt
socket
WSAGetLastError
send
recv
WSACleanup
WSAStartup
getsockname
connect
select
bind
ioctlsocket
getservbyport
ntohs
gethostbyaddr
InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ