DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
215e0821206e4a7fb52b6151f2e51e94_JaffaCakes118.dll
Resource
win7-20240611-en
Target
215e0821206e4a7fb52b6151f2e51e94_JaffaCakes118
Size
196KB
MD5
215e0821206e4a7fb52b6151f2e51e94
SHA1
0a9e76435c584e14d19ac6377391c780d19e060f
SHA256
1ac7b1f73c41269ccb5d3ea28740ed24e56b785c95417dc080c16fcc4bf9777a
SHA512
adaa7f38d582188967d76fce8447e4b0ef3a130da8ede4fee2b00b11229c88964f294db28d2b85d3273d98b614673a1d59c71f58199924e18816b6499015c045
SSDEEP
3072:UMKFb9FSlO0uO6FaOHCX4u1MCn5LevMfa3DOESeJFUDIGuP3btWl/43je9:U1bnSE9OMHCX/1/C3DOGUDbwce3a9
Checks for missing Authenticode signature.
resource |
---|
215e0821206e4a7fb52b6151f2e51e94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HttpAddRequestHeadersA
InternetCloseHandle
InternetQueryDataAvailable
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetOpenA
InternetGetConnectedState
InternetConnectA
connect
closesocket
WSAStartup
gethostbyname
WSACleanup
inet_addr
socket
htons
GetCurrentProcessId
QueryPerformanceCounter
VirtualProtect
VirtualQuery
ReadFile
GetVersion
CloseHandle
WriteFile
CreateFileA
GetTickCount
FreeLibrary
GetConsoleTitleA
GetTempPathA
GlobalFindAtomA
IsProcessorFeaturePresent
FindAtomA
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
GetCurrentProcess
GlobalGetAtomNameA
GetComputerNameA
GetAtomNameA
GetWindowsDirectoryA
GetCurrentThread
WideCharToMultiByte
lstrlenA
lstrcpyA
GetCurrentDirectoryA
lstrcpyW
lstrlenW
GetModuleFileNameA
GetFileSize
TerminateProcess
WaitForSingleObject
DeleteFileA
Sleep
MultiByteToWideChar
lstrcmpA
LCMapStringA
lstrcpynW
lstrcatW
lstrcmpW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiA
CreateThread
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetStdHandle
ExitProcess
VirtualFree
HeapSize
HeapCreate
HeapDestroy
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetOEMCP
GetCPInfo
GetProcessHeap
GetCommandLineA
GetCurrentThreadId
HeapReAlloc
GetSystemInfo
VirtualAlloc
RtlUnwind
GetSystemTimeAsFileTime
LCMapStringW
GetStringTypeA
GetStringTypeW
lstrcpynA
SetHandleCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
HeapAlloc
HeapFree
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CharNextA
CharLowerA
wsprintfA
UnregisterClassA
CharUpperW
GetWindow
GetWindowLongA
GetWindowDC
GetSysColor
GetCursor
GetClassNameA
GetFocus
GetDesktopWindow
GetCapture
FindWindowA
IsWindowVisible
CharUpperA
GetDC
IsWindowEnabled
GetClassLongA
GetActiveWindow
GetDeviceCaps
GetBkColor
GetBkMode
GetTextColor
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
GetUserNameA
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
SHGetSpecialFolderPathA
ShellExecuteExA
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
VarUI4FromStr
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysAllocStringLen
SysStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ