DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
RegisterTrayIcon
RunTrayIcon
ShowDoneMessage
ShowWelcomePage
UnregisterTrayIcon
Static task
static1
Behavioral task
behavioral1
Sample
2d12f3708bc310410a198ced30a64e6a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
2d12f3708bc310410a198ced30a64e6a_JaffaCakes118
Size
348KB
MD5
2d12f3708bc310410a198ced30a64e6a
SHA1
9e650e4d3c88ddaac41c6f9828dc4e4fb480e491
SHA256
402516a8a9aeec8871963261700e60743739b6fb95f2bea91e93ce5193942af9
SHA512
4a4c5fd8f8cdbbdf7d90acc8f6c59635b69580e8ccfb437407d16cedcad8653abde91286fe4751111e9489235fbe915b5bfc77d7033bf18a8d1d6b248980fed9
SSDEEP
6144:ILowojVF33t06qk8Bxh61Hqya9dCaVpJGoTPc:ILoXt060Bxh6Kp9dCaVpJG4
Checks for missing Authenticode signature.
resource |
---|
2d12f3708bc310410a198ced30a64e6a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HttpQueryInfoA
InternetCrackUrlA
InternetQueryOptionA
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetReadFile
InternetGetConnectedState
HttpAddRequestHeadersA
StrToIntA
StrNCatA
StrRChrA
PathFileExistsA
wvnsprintfA
StrStrA
StrCmpNIA
wnsprintfA
StrStrIA
UuidCreate
UuidToStringA
InitCommonControlsEx
GetProcAddress
GetModuleHandleA
lstrlenA
WinExec
IsDBCSLeadByte
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
OpenProcess
CloseHandle
GetCurrentProcess
LocalFree
HeapFree
lstrcmpA
ExpandEnvironmentStringsA
GetModuleHandleW
SetThreadLocale
GetThreadLocale
LockResource
FindResourceExA
WriteFile
CreateFileA
TerminateThread
GetTickCount
TlsSetValue
TlsGetValue
ReleaseMutex
SleepEx
lstrcpyA
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
GetVersionExA
GetVersion
HeapReAlloc
ResetEvent
CreateEventA
SetEvent
OpenEventA
FlushInstructionCache
VirtualAlloc
InterlockedIncrement
LoadLibraryA
VirtualFree
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
Process32Next
Process32First
CreateToolhelp32Snapshot
GlobalFree
GlobalAlloc
GetTempPathA
lstrlenW
GetCurrentProcessId
GetExitCodeProcess
CreateProcessA
DeleteFileA
ExitProcess
SetLastError
GetCPInfo
LCMapStringW
LCMapStringA
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
RtlUnwind
HeapSize
HeapDestroy
GetLastError
lstrcpynA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
GetStdHandle
GetStringTypeA
GetStringTypeW
SetHandleCount
GetEnvironmentStringsW
QueryPerformanceCounter
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
SetFilePointer
GetConsoleCP
GetConsoleMode
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetStdHandle
GetModuleFileNameA
TlsAlloc
TlsFree
lstrcmpiA
GetProcessHeap
HeapAlloc
GetPrivateProfileStringA
InterlockedDecrement
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
VirtualProtect
FreeEnvironmentStringsW
DestroyWindow
RegisterClassExA
DefWindowProcA
RedrawWindow
SetActiveWindow
DrawAnimatedRects
GetWindowLongA
SetWindowLongA
CreateWindowExA
SetParent
FindWindowA
EnumChildWindows
SystemParametersInfoA
DrawMenuBar
SetForegroundWindow
TrackPopupMenu
PostMessageA
GetMenuItemID
RegisterWindowMessageA
GetSubMenu
DestroyMenu
SetMenuDefaultItem
IsWindow
LoadStringA
LoadIconA
LoadImageA
DestroyIcon
SetTimer
KillTimer
GetWindowDC
ReleaseDC
CharNextW
GetShellWindow
GetWindowThreadProcessId
GetUserObjectSecurity
GetClientRect
GetWindowRect
GetCursorPos
SetCursorPos
mouse_event
CharNextA
MessageBoxA
SendMessageA
SetWindowPos
DispatchMessageA
TranslateMessage
GetMessageA
GetActiveWindow
LoadCursorA
GetSysColorBrush
UpdateWindow
ShowWindow
LoadMenuA
GetClassNameA
SelectObject
BitBlt
DeleteObject
DeleteDC
CreateDIBSection
CreateCompatibleDC
GetPixel
CreateProcessAsUserA
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetNamedSecurityInfoA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
SetTokenInformation
GetLengthSid
ConvertStringSidToSidW
DuplicateTokenEx
RegQueryInfoKeyA
RegEnumKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
IsValidSid
GetSecurityDescriptorOwner
OpenProcessToken
ConvertSidToStringSidA
RegOpenKeyA
CloseServiceHandle
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegSetValueExA
SHAppBarMessage
SHGetFolderPathA
Shell_NotifyIconA
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
StringFromGUID2
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
OleSetContainedObject
OleCreate
OleUninitialize
OleInitialize
CoTaskMemAlloc
SysAllocStringLen
VariantInit
VariantClear
VarUI4FromStr
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString
UnRegisterTypeLi
RegisterTypeLi
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreate
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
RegisterTrayIcon
RunTrayIcon
ShowDoneMessage
ShowWelcomePage
UnregisterTrayIcon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ