DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
22e7002dfb4f97d95f477b6257a78e86_JaffaCakes118.dll
Resource
win7-20240419-en
Target
22e7002dfb4f97d95f477b6257a78e86_JaffaCakes118
Size
46KB
MD5
22e7002dfb4f97d95f477b6257a78e86
SHA1
898e562b04b784654faf91fb29be9d223da2eb2c
SHA256
aed15c9139da1f94cfde71bb10801728b816e7cb46002f6812100b0c1bea5398
SHA512
b1680b1d31417813292625477a50470b4f9dbf2cb53b244da6f284ffcb910c44e97a012c7406d646ef3d6f68a550570c235c018148a082fbf334fa69aebda48d
SSDEEP
768:rvVO9NT34lGrKSBJCHAW0Kt7NAe5EJqkehZVw:rvVmNT34WKSBJCHAW0Kt7NAeeJqkehZ
Checks for missing Authenticode signature.
resource |
---|
22e7002dfb4f97d95f477b6257a78e86_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
SetEvent
ExitThread
GetSystemDirectoryW
GetTickCount
lstrlenW
GetModuleHandleA
lstrcpyW
lstrcatW
GetProcessHeap
HeapFree
IsBadStringPtrA
lstrcmpA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
ResetEvent
GetFileAttributesA
FindClose
GetVersionExA
WaitForSingleObject
HeapAlloc
HeapReAlloc
lstrlenA
CompareStringW
Sleep
lstrcatA
GetSystemDirectoryA
SetFilePointer
CreateFileA
ReleaseMutex
SetEndOfFile
GetModuleHandleW
CreateEventA
CreateMutexW
CreateThread
ReadFile
WriteFile
WriteProcessMemory
GetCurrentProcess
VirtualProtect
lstrcmpiA
lstrcpyA
wsprintfW
CharLowerA
CharUpperW
wsprintfA
InitializeSecurityDescriptor
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptEncrypt
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptDecrypt
SysAllocString
SysFreeString
InternetConnectA
InternetCrackUrlA
InternetCrackUrlW
CoInternetCombineUrl
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ