DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0e427645db877291f4a18b0d6fa02623_JaffaCakes118.dll
Resource
win7-20240220-en
Target
0e427645db877291f4a18b0d6fa02623_JaffaCakes118
Size
76KB
MD5
0e427645db877291f4a18b0d6fa02623
SHA1
430f709f8ac84b27802ba324ba2ad6d632fbe3eb
SHA256
d5568875e683fff881ee5d7ba4f94ef2c22a9c412502ea3e33f3bad844bf9676
SHA512
aaa3a8db95237fd7834a03f990f9bbe0a52e5cd460bc05c417684f7062075ead61d42d351f60aa20788ede10a49aeb0021281bf8a9afc0afc80a251de9d6659c
SSDEEP
1536:FeT6vdJvh1crepSKvsIh5//TI8Qk1QYQrY9lOI:FeTSdJvhui0KkS/r7QrY9lOI
Checks for missing Authenticode signature.
resource |
---|
0e427645db877291f4a18b0d6fa02623_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UnmapViewOfFile
GlobalFree
GlobalAlloc
SetFilePointer
lstrcpyA
MapViewOfFile
CloseHandle
SetEndOfFile
lstrcatA
GetWindowsDirectoryA
WriteFile
GetLastError
GetProcAddress
LoadLibraryA
ReadFile
GetFileSize
CreateFileMappingA
CreateFileA
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
FreeLibrary
GetShortPathNameA
WideCharToMultiByte
VirtualAlloc
ExitProcess
TerminateProcess
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
IsBadCodePtr
SetUnhandledExceptionFilter
RaiseException
LocalFree
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
DisableThreadLibraryCalls
SetStdHandle
RtlUnwind
GetOEMCP
MultiByteToWideChar
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetEnvironmentStringsW
TlsAlloc
GetCurrentProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeW
GetCurrentThreadId
TlsSetValue
GetStdHandle
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
wsprintfA
RegSetValueExA
RegQueryValueExA
RegFlushKey
RegCreateKeyExA
RegCloseKey
ShellExecuteA
CoCreateGuid
SysAllocString
VariantCopy
VariantChangeType
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetGetConnectedState
ord18
ord30
ord23
ord21
ord16
ord15
ord32
ord58
ord31
ord22
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ