DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
16f3905d57d5672db1b937bd743d4130_JaffaCakes118.dll
Resource
win7-20240508-en
Target
16f3905d57d5672db1b937bd743d4130_JaffaCakes118
Size
81KB
MD5
16f3905d57d5672db1b937bd743d4130
SHA1
e6faeedbe79fdcc7b62de957edf222391131ab7f
SHA256
1606263a9cb8d4cfeab905f8c2d9387c9f23135748b76731cdf9c4de1071e205
SHA512
9ba86f6f824647e1fea7a6b2a6631245995a096572822fde77a6249bd289fc34664820cd3a5a1018f81e6e33e6c8632781be2514535e637f58b924c023670d7e
SSDEEP
1536:EPD4JjXU5J7YwkbP72mjppKnMguRs85GE:EPKmpYXP72mdqgV
Checks for missing Authenticode signature.
resource |
---|
16f3905d57d5672db1b937bd743d4130_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
SetEvent
ExitThread
GetSystemDirectoryW
GetTickCount
lstrlenW
GetModuleHandleA
lstrcpyW
lstrcatW
GetProcessHeap
HeapFree
IsBadStringPtrA
lstrcmpA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
CreateEventA
SetFileTime
GetVersionExA
CloseHandle
lstrcpyA
HeapAlloc
HeapReAlloc
lstrlenA
CompareStringW
Sleep
lstrcatA
GetSystemDirectoryA
SetFilePointer
CreateFileA
ReleaseMutex
SetEndOfFile
CreateMutexW
CreateThread
ReadFile
WriteFile
WriteProcessMemory
GetCurrentProcess
VirtualProtect
lstrcmpiA
wsprintfA
CharUpperW
CharLowerA
wsprintfW
InitializeSecurityDescriptor
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptEncrypt
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptDecrypt
CoGetMalloc
StringFromIID
SysAllocString
SysFreeString
InternetCrackUrlW
InternetCrackUrlA
InternetConnectA
CoInternetCombineUrl
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ