DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
Static task
static1
Behavioral task
behavioral1
Sample
30e4e4a7bc3bdde816691090c1d9aa4f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
30e4e4a7bc3bdde816691090c1d9aa4f_JaffaCakes118
Size
141KB
MD5
30e4e4a7bc3bdde816691090c1d9aa4f
SHA1
a475e0af8bc8abbe3ae5f711e0c96bc8325c30d3
SHA256
c2b7243bbc68164ec298fd2758a31ecc4059de4e7ba5459c606e678bf4b0f515
SHA512
c78682cdc3e8a021cb0cc72f3679a86fb82bfa7ff1ed39977c2f4c2b0bac4065051989eeaacf5cc8af1dbe90f57f83e154115e00d8f3bdb9141fe19ab649709c
SSDEEP
3072:CTushfr5o6X2qFUIsY/6QxzNlvVgPnzNKk5oEWElz:iushdhX2qFCs6izipK9t0
Checks for missing Authenticode signature.
resource |
---|
30e4e4a7bc3bdde816691090c1d9aa4f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrChrA
wnsprintfA
StrStrIA
InternetSetCookieA
InternetCrackUrlA
InitializeCriticalSection
RaiseException
LoadLibraryA
GetModuleFileNameA
DeleteCriticalSection
GetThreadLocale
SetThreadLocale
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
GetLastError
GetModuleHandleA
lstrcmpiA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
InterlockedDecrement
CloseHandle
OpenMutexA
GetProcessHeap
GetVolumeInformationA
GetComputerNameA
HeapAlloc
HeapFree
GetTickCount
GetCurrentProcessId
TerminateThread
WaitForSingleObject
Sleep
ReleaseMutex
CreateThread
CreateFileA
WriteFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InterlockedIncrement
FreeLibrary
FlushFileBuffers
LCMapStringW
GetStringTypeA
GetStringTypeW
lstrcpynA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
LCMapStringA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
VirtualFree
HeapReAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetCPInfo
GetACP
CharNextW
CharNextA
RegCreateKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
LoadRegTypeLi
VarUI4FromStr
VariantClear
VariantInit
SysAllocStringLen
UnRegisterTypeLi
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ