DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
31a216fcc5d95bfde4b85cd95df90fb5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
31a216fcc5d95bfde4b85cd95df90fb5_JaffaCakes118
Size
172KB
MD5
31a216fcc5d95bfde4b85cd95df90fb5
SHA1
5d35d04afd79d97132ac400db0a6348d9b4adbc2
SHA256
fdd1f0125568378e1984fb6e6f04db4479ce5f0d4ef86b7865122a8bf198673d
SHA512
61d12faab36635865cf15161013135e7a16c409ec4d00a81165b2ab2f0b8cc6bac745e2bfcc2bd2813adbee0cdc5bc68d5ee6f608a4f20ccb9fcffa6abd88e68
SSDEEP
3072:cVILMQHLsDa5ZOqX0wt7V+N2U6OYuYMy+X5O8O7djf5JcVy9:czQHLsm5ZOre7V+ABJuYMycgdjf5Q
Checks for missing Authenticode signature.
resource |
---|
31a216fcc5d95bfde4b85cd95df90fb5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCheckConnectionA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
UrlMkSetSessionOption
ObtainUserAgentString
CoInternetCompareUrl
URLDownloadToFileA
GetLocalTime
InterlockedExchange
GetVersionExA
GetACP
GetLocaleInfoA
GetThreadLocale
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
MultiByteToWideChar
GetLastError
WideCharToMultiByte
lstrlenW
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
lstrcatA
ExitProcess
GetTickCount
Sleep
lstrcatW
lstrcpyW
GetModuleFileNameA
CreateProcessA
CloseHandle
TerminateThread
WaitForSingleObject
CreateThread
lstrcpyA
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetCPInfo
GetOEMCP
WriteFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetSystemTime
lstrlenA
lstrcmpiA
FreeLibrary
DisableThreadLibraryCalls
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
ReadFile
SetStdHandle
FlushFileBuffers
HeapDestroy
GetCurrentProcessId
QueryPerformanceCounter
TlsAlloc
TlsGetValue
SetLastError
TlsFree
HeapSize
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
GetCommandLineA
TlsSetValue
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
RaiseException
HeapFree
RtlUnwind
EndDialog
GetKeyboardType
EnumWindows
ReplyMessage
GetDoubleClickTime
FlashWindow
GetFocus
GetSubMenu
DeleteMenu
GetParent
FindWindowA
GetMessagePos
GetKeyboardLayout
wsprintfA
GetLastActivePopup
GetCapture
DestroyMenu
wsprintfW
SetTimer
GetActiveWindow
CreateDialogParamA
UpdateWindow
InSendMessage
KillTimer
CharNextA
GetDC
GetBkColor
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
SHGetSpecialFolderPathA
ShellExecuteA
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
VariantClear
DispCallFunc
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysStringLen
LoadRegTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
VarUI4FromStr
VariantInit
PathFindExtensionA
InitCommonControlsEx
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ