DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
calloc
free
malloc
realloc
Static task
static1
Behavioral task
behavioral1
Sample
287c65d8081a576f4a4b0693a39d53f8_JaffaCakes118.dll
Resource
win7-20240221-en
Target
287c65d8081a576f4a4b0693a39d53f8_JaffaCakes118
Size
56KB
MD5
287c65d8081a576f4a4b0693a39d53f8
SHA1
2feaa8b3061ee5bf801be8fb78dd9a6ed1a12224
SHA256
a93e122719d70ac81cfca574e3a21b0169d60d7c5250d356b18ca20d47802ff4
SHA512
d26e72c34302c92822bc19819967d62fa5da9e28607152ca902545131192c5767e3d3008761f9681c76381e3758fea0424f09d46219e9a72d211c7aa22504cd2
SSDEEP
768:efNzgybXMx7gLtFhh4niLZowk+r+p6TwQBk2ji/Hxpd:eVzgXx7gLtva8Zop+r++wu/jeHxp
Checks for missing Authenticode signature.
resource |
---|
287c65d8081a576f4a4b0693a39d53f8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTempFileNameA
lstrcmpA
ReadFile
SetFilePointer
GetFileSize
SystemTimeToFileTime
GetSystemTime
SetFileTime
Process32Next
TerminateProcess
OpenProcess
lstrcmpiA
Module32First
Process32First
CreateToolhelp32Snapshot
GetLocaleInfoA
GetVersionExA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
CreateDirectoryA
FindClose
FindNextFileA
WritePrivateProfileStringA
FindFirstFileA
RemoveDirectoryA
CopyFileA
GetModuleFileNameA
GetCurrentProcessId
ReleaseMutex
GetLastError
CreateMutexA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
WaitForSingleObject
CreateEventA
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
CreateThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapAlloc
GetSystemInfo
HeapCreate
InterlockedIncrement
InterlockedDecrement
DebugBreak
HeapReAlloc
HeapFree
GetWindowsDirectoryA
lstrcatA
GetSystemDirectoryA
ExpandEnvironmentStringsA
GetTempPathA
DeleteFileA
GlobalAlloc
CreateFileA
WriteFile
CloseHandle
GlobalFree
lstrcpynA
lstrcpyA
SetFileAttributesA
lstrlenA
GetTopWindow
GetWindowThreadProcessId
GetWindow
IsWindowVisible
RegQueryValueExA
RegOpenKeyA
RegCloseKey
StrStrA
ShellExecuteA
StrRChrA
StrStrIA
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocStringLen
SysFreeString
ord23
ord57
ord18
ord21
ord31
ord15
ord32
ord30
ord58
ord16
_itoa
strchr
strlen
atoi
abs
rand
memcmp
memcpy
time
srand
_ftol
memset
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
calloc
free
malloc
realloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ