DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2408ec59a31b82519a74b793ac52d1a8_JaffaCakes118.dll
Resource
win7-20240611-en
Target
2408ec59a31b82519a74b793ac52d1a8_JaffaCakes118
Size
128KB
MD5
2408ec59a31b82519a74b793ac52d1a8
SHA1
9b26616be56a1213c8072ad5bdfd85fd1f6a66e9
SHA256
c06e13f638a3e13504ace045f92dfab4c5715c6f0a084eab7c14ad2e03055f47
SHA512
935407cc7c1b97890a2d14ac32e0709290f3dfac538f22574479658ab3b9e843df1de2ad5c1479f67446d1e9049664aeb2d6c4ba49dfb7a3b957109a3628e348
SSDEEP
1536:q7VYgGPi60jUpnEZnIGFzzwm+1rI+Sg04ZdiMLWHwNP4xT49wo1IZ9YONqNcWboh:qZCH0w5ULFv2I2WQd45o1/ONqNcWbrU
Checks for missing Authenticode signature.
resource |
---|
2408ec59a31b82519a74b793ac52d1a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
URLDownloadToFileA
ObtainUserAgentString
UrlMkSetSessionOption
DisableThreadLibraryCalls
lstrcatA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
FreeLibrary
IsDBCSLeadByte
lstrcpynA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
WideCharToMultiByte
lstrlenW
GetLastError
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
CloseHandle
Sleep
CreateMutexA
ReleaseMutex
lstrcpyW
lstrcatW
CreateProcessA
lstrcmpiA
SetStdHandle
LCMapStringW
LCMapStringA
LoadLibraryA
RtlUnwind
GetStringTypeW
GetStringTypeA
lstrcpyA
lstrlenA
GetModuleFileNameA
ReadFile
FlushFileBuffers
IsBadCodePtr
RaiseException
SetUnhandledExceptionFilter
VirtualQuery
GetSystemInfo
VirtualProtect
SetFilePointer
GetCPInfo
GetTickCount
QueryPerformanceCounter
WriteFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
IsBadWritePtr
VirtualAlloc
GetOEMCP
IsBadReadPtr
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
GetProcAddress
GetModuleHandleA
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
GetCurrentProcessId
KillTimer
CharNextA
SetTimer
wsprintfW
wsprintfA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
ShellExecuteA
SHGetSpecialFolderPathA
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
VarUI4FromStr
DispCallFunc
VariantClear
VariantInit
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysStringLen
SysAllocString
UnRegisterTypeLi
RegisterTypeLi
PathFindExtensionA
InitCommonControlsEx
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ