DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2e43ca7bab537172986a08feddf577cb_JaffaCakes118.dll
Resource
win7-20240705-en
Target
2e43ca7bab537172986a08feddf577cb_JaffaCakes118
Size
168KB
MD5
2e43ca7bab537172986a08feddf577cb
SHA1
0794ac61729811fe9fe89fdcac6b2f4c15542a26
SHA256
8473e0a0f48056564481916968d5970fd2b6cbfe2f02d595e6b508cae7cb8f72
SHA512
0713ed4cfbf02a92c5c07c5fbd2b8144e776536654018822ca40b0142cf1a5f9e0a59706dbea47b1206b43ed2ec18b2798cc8456cb02920664e1ddd3743a3cf4
SSDEEP
3072:J1xaOPVqPQo0bhpHbBcSnpOfkgk007EkdbrlhLmpc:j0+bkkB0xk5DL0
Checks for missing Authenticode signature.
resource |
---|
2e43ca7bab537172986a08feddf577cb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
GetCurrentThreadId
GetCurrentProcessId
GetPrivateProfileIntA
GetPrivateProfileStringA
GetSystemDirectoryA
IsBadWritePtr
IsBadReadPtr
MoveFileA
DeleteFileA
TerminateThread
CloseHandle
GetLocalTime
SetFileAttributesA
CopyFileA
WriteFile
CreateFileA
GetVersion
WritePrivateProfileStringA
GetWindowsDirectoryA
GetShortPathNameA
GetFileAttributesA
FindClose
FindFirstFileA
WaitForSingleObject
Process32Next
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
SystemTimeToFileTime
FileTimeToSystemTime
GetUserDefaultLangID
GetTempPathA
GetPrivateProfileSectionNamesA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
SetFilePointer
IsBadCodePtr
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
DisableThreadLibraryCalls
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryA
GetCurrentDirectoryA
GetFullPathNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
GetCurrentProcess
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
ExitProcess
VirtualFree
HeapCreate
TlsGetValue
SetLastError
TlsFree
TlsAlloc
GetCommandLineA
GetDriveTypeA
FileTimeToLocalFileTime
ExitThread
TlsSetValue
CreateThread
RaiseException
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
SetEnvironmentVariableA
GetParent
CharNextA
SetWindowsHookExA
MessageBoxA
UnhookWindowsHookEx
SetFocus
SetWindowTextA
GetClassNameA
CallNextHookEx
GetFocus
SetForegroundWindow
wsprintfA
FindWindowExA
LoadStringA
GetWindowTextA
RegSetValueExA
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
ShellExecuteA
ShellExecuteExA
SHGetSpecialFolderPathA
CoTaskMemRealloc
CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
SysStringLen
SysAllocStringLen
VarUI4FromStr
SysFreeString
VariantCopy
VariantChangeType
VariantClear
SysAllocString
InternetOpenA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
InternetSetCookieA
DeleteUrlCacheEntry
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ