DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Install
Static task
static1
Behavioral task
behavioral1
Sample
29f2db30d62ab708e80d29868da14694_JaffaCakes118.dll
Resource
win7-20240705-en
Target
29f2db30d62ab708e80d29868da14694_JaffaCakes118
Size
52KB
MD5
29f2db30d62ab708e80d29868da14694
SHA1
5c200e3b99dc8ad0d57efa9312b77213a604deb5
SHA256
b653c2cf6ab58dbd47ac205628cbbe7a7583d0abcc659a325a9de163c56eaaec
SHA512
34582912074d65d5a681de38ceb448120a1edaf27c8385c5a42a96c392e461f6c44067910833c560a3194cb9c7e274cbeb494aaadaea7cfb150cc293796f075f
SSDEEP
768:uX+P/ZbifT8o7I40ULMX37GIQy1Ng8H9zp23FWuT:++Hy8o3xLMX35Qq1zcBT
Checks for missing Authenticode signature.
resource |
---|
29f2db30d62ab708e80d29868da14694_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
GetShortPathNameW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
lstrlenA
SizeofResource
LoadResource
FindResourceW
DisableThreadLibraryCalls
lstrcmpiW
lstrcpynW
HeapDestroy
GetProcAddress
LoadLibraryW
lstrcpyW
lstrcatW
DeleteFileA
WinExec
GetBinaryTypeA
GetTickCount
GetTempPathA
GetLocalTime
WideCharToMultiByte
CreateFileMappingA
CloseHandle
GetLastError
UnmapViewOfFile
GetModuleFileNameA
OpenFileMappingA
MapViewOfFile
TerminateProcess
GetCurrentProcessId
OpenProcess
CreateThread
ReadProcessMemory
Sleep
GetCurrentProcess
LoadLibraryExW
SetWindowsHookExW
CharLowerA
GetMessageW
CharNextW
CallNextHookEx
RegEnumValueW
RegDeleteKeyW
RegCreateKeyA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegCreateKeyExW
ShellExecuteA
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
??2@YAPAXI@Z
_stricmp
_adjust_fdiv
_initterm
wcscmp
wcslen
swprintf
strstr
_access
rename
fwrite
fclose
strchr
atoi
memcmp
realloc
malloc
free
calloc
??3@YAXPAX@Z
memset
sprintf
strcpy
strlen
memcpy
getc
fopen
strcat
fgets
strncmp
_splitpath
_purecall
closesocket
connect
gethostbyname
inet_addr
socket
recv
send
WSAStartup
htons
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Install
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ