DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2d731755dee00d57757c50a889bd9cd5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2d731755dee00d57757c50a889bd9cd5_JaffaCakes118
Size
128KB
MD5
2d731755dee00d57757c50a889bd9cd5
SHA1
2a916b0cbf6eef4ee2e1a2366ff6ae8c76dc57d8
SHA256
bf1ddc0c9f0c66050a8159b06ccf82342ecfa6354e687a56399a01d2738b6e8b
SHA512
5769262e3f2bd3f7a5ef79b376ded4e6243cacd4edd3959e38bbf50f62c6b4de2b342e262cf821aa845f897bfebe1b99dd927b1e60156b3308a8265f056517f1
SSDEEP
3072:5RF6rlKdJUs73HvokHKN5MHz1gWpp90sX:45gHv/o5Iz3Cs
Checks for missing Authenticode signature.
resource |
---|
2d731755dee00d57757c50a889bd9cd5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetAdaptersInfo
StrStrA
StrChrA
StrStrIA
UrlGetPartA
CloseHandle
GetFileSize
CreateFileA
WritePrivateProfileStringA
GetWindowsDirectoryA
MoveFileExA
GetTempFileNameA
GetTempPathA
CreateProcessA
MoveFileA
DeleteFileA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
CreateDirectoryA
lstrcmpA
FreeLibrary
GetProcAddress
LoadLibraryA
ReadFile
TlsGetValue
TlsFree
TlsAlloc
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
GetShortPathNameA
GetModuleHandleA
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
IsDBCSLeadByte
HeapDestroy
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
TlsSetValue
GetVolumeInformationA
GetTimeZoneInformation
GetLocalTime
HeapReAlloc
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
ExitProcess
GetEnvironmentVariableA
GetVersionExA
HeapCreate
RtlUnwind
TerminateProcess
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetStringTypeA
GetStringTypeW
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers
GetPrivateProfileIntA
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcmpiA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GetSystemDirectoryA
lstrcatA
lstrcpynA
lstrcpyA
ExitThread
EnterCriticalSection
LeaveCriticalSection
lstrlenW
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
CreateThread
VirtualFree
VirtualAlloc
GetSystemTime
CreateWindowExA
ShowWindow
UnionRect
PtInRect
GetKeyState
DefWindowProcA
RegisterClassExA
SetWindowLongA
GetParent
LoadStringA
CallWindowProcA
IsWindow
SendMessageA
wsprintfA
CharLowerBuffA
CharNextA
GetWindowLongA
IsChild
GetFocus
OffsetRect
DestroyWindow
GetKeyboardLayout
LoadCursorA
InvalidateRect
SetWindowPos
GetClassInfoExA
SetWindowRgn
BeginPaint
EqualRect
IntersectRect
ReleaseDC
GetDC
SetFocus
EndPaint
GetClientRect
SetParent
CreateRectRgnIndirect
DeleteDC
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
GetDeviceCaps
CreateDCA
CreateFontA
RestoreDC
RegCloseKey
RegEnumValueA
RegDeleteKeyA
RegQueryInfoKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
OleRegGetUserType
CreateOleAdviseHolder
WriteClassStm
OleLoadFromStream
OleRegGetMiscStatus
OleRegEnumVerbs
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
OleSaveToStream
CoUninitialize
CoCreateInstance
CoTaskMemFree
VarUI4FromStr
OleCreatePropertyFrame
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
RegisterTypeLi
LoadTypeLi
SysFreeString
SysStringLen
LoadRegTypeLi
SysAllocString
SysAllocStringLen
VariantClear
InitCommonControlsEx
URLDownloadToFileA
CreateURLMoniker
URLDownloadToCacheFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ