DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0a54a48d796a083d0bb941b049dd68c4_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0a54a48d796a083d0bb941b049dd68c4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0a54a48d796a083d0bb941b049dd68c4_JaffaCakes118
Size
50KB
MD5
0a54a48d796a083d0bb941b049dd68c4
SHA1
5bb932ac24b9768478f25cf9189a3dcd6f3c8303
SHA256
2e048b332fe83c5dd954e5905de01161ce248f81732a91e57c8ba96a3c2a3da0
SHA512
4e810cb94ce45e85093cff35da84344899f6bde17aa5846bbde2277e978374cdeecdbbc79258155afa8610c919a979966a5f77737530a12e00cb717d46583547
SSDEEP
768:naEVut+DBnZBgCZePn9MP1m1OfmVllks2KP7kvom9cXHHnFporYCoulehKiSSrDL:a7+ZWP9DnnorloJhKiDrDL
Checks for missing Authenticode signature.
resource |
---|
0a54a48d796a083d0bb941b049dd68c4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
_purecall
_initterm
wcstombs
ftell
fopen
fseek
fclose
fread
fwrite
strcat
strchr
tolower
atoi
strcmp
strcpy
atol
exit
memcmp
strtok
strncpy
??3@YAXPAX@Z
strlen
strstr
memcpy
memset
realloc
malloc
free
??2@YAPAXI@Z
FormatMessageA
FindResourceA
GetCurrentProcess
GetLastError
GetTempPathA
GetCurrentThreadId
FlushInstructionCache
DeleteFileA
CopyFileA
CreateFileA
WriteFile
GetPrivateProfileStringA
FindFirstFileA
FindClose
CloseHandle
TerminateProcess
CreateDirectoryA
OpenProcess
GetProcessHeap
HeapAlloc
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
HeapDestroy
GetFileAttributesA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
Sleep
HeapFree
HeapReAlloc
DialogBoxParamA
GetWindowLongA
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
SetWindowLongA
SetWindowTextA
GetDlgItem
SendDlgItemMessageA
GetParent
EndDialog
GetActiveWindow
EnumThreadWindows
EnumWindows
GetWindowTextA
IsWindow
GetWindowThreadProcessId
BringWindowToTop
TranslateMessage
DispatchMessageA
EnableWindow
ShowWindow
KillTimer
SetTimer
wsprintfA
MessageBoxA
CharNextA
PostMessageA
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoTaskMemRealloc
CoInitialize
SysFreeString
SysStringLen
VarUI4FromStr
SysAllocString
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
VariantClear
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RasGetEntryPropertiesA
RasGetConnectStatusA
RasSetEntryDialParamsA
RasEditPhonebookEntryA
RasEnumConnectionsA
RasHangUpA
RasGetEntryDialParamsA
RasDialA
RasEnumDevicesA
RasEnumEntriesA
RasSetEntryPropertiesA
RasGetErrorStringA
InternetQueryOptionA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState
SetupIterateCabinetA
SHGetPathFromIDListA
ShellExecuteA
SHGetSpecialFolderLocation
gethostbyname
gethostname
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ