DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2894e8d68947f47aad78c94460d27567_JaffaCakes118.dll
Resource
win7-20240221-en
Target
2894e8d68947f47aad78c94460d27567_JaffaCakes118
Size
284KB
MD5
2894e8d68947f47aad78c94460d27567
SHA1
aeecda3cf1aea233ad9bd93969af42eb6c460a1e
SHA256
80ffe31d9cd990c7391587b2d1351e37d41f7ea9d76a63763849a6d1b73475fc
SHA512
c784a71b8cea7ed03b11ee0f9fc7bb35142e46238f64fe3bbba54d213a606a8b59671452222329461a2f4c63c682e0c4c8a878d38175cc7a3f95f834cf6a376a
SSDEEP
3072:mHu9WRzQ5GW0f8Tsf2ppz52v79CDJmiwJw4T7QMjodjPKFvmi5lhD7zBthQQVn62:D93ofN2pdJTi2LcvJz1tz
Checks for missing Authenticode signature.
resource |
---|
2894e8d68947f47aad78c94460d27567_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
CreateThread
SetEvent
WriteFile
SetFilePointer
CreateFileW
GetModuleFileNameW
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetLastError
RaiseException
FreeLibrary
MultiByteToWideChar
SizeofResource
FormatMessageW
FindResourceW
LoadLibraryExW
lstrcmpiW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetTempFileNameW
CreateProcessW
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
CreateFileA
lstrlenW
LocalAlloc
LocalFree
OpenEventW
WaitForSingleObject
ResetEvent
CloseHandle
GetTickCount
LoadResource
GetWindowsDirectoryW
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
LoadLibraryA
FreeEnvironmentStringsA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
ExitProcess
HeapSize
MessageBoxW
CharNextW
UnregisterClassA
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
LoadRegTypeLi
LoadTypeLi
SysStringLen
RegisterTypeLi
VarUI4FromStr
VariantChangeType
VariantInit
SysAllocString
SysFreeString
VariantClear
UnRegisterTypeLi
StrToIntW
InternetConnectW
InternetOpenW
InternetCloseHandle
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetReadFile
HttpQueryInfoW
InternetAttemptConnect
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ