DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
329996cf1e3aabd2a2a49a018135f940_JaffaCakes118.dll
Resource
win7-20240704-en
Target
329996cf1e3aabd2a2a49a018135f940_JaffaCakes118
Size
180KB
MD5
329996cf1e3aabd2a2a49a018135f940
SHA1
e791684c81a596d57d023324cd7b84173d74e26b
SHA256
bf1db06be031a7ba4b56e37a92112c95ed2d21747ed44ff6d06bdde9f334e334
SHA512
a42299a9b8f990d3b13df26c3f03e5ff4f5cf2e987191097c2e97cd25c66628b9341f6e681a766cd12ba6274f708d0215517eaa7231db0bff5fd9bdf4b93769f
SSDEEP
3072:8LfsqnI+QsgIz0hXrkQHJyqi2UdTFH/ZE1vfuKjlzB7vMR:IETIivJyqiTT9BI/BZv
Checks for missing Authenticode signature.
resource |
---|
329996cf1e3aabd2a2a49a018135f940_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
CompareStringA
CompareStringW
DeleteFileA
CloseHandle
ReadFile
GetFileSize
CreateFileA
LocalFree
FormatMessageA
CreateProcessA
MoveFileA
GetSystemDirectoryA
HeapFree
GetProcessHeap
SetLastError
GlobalUnlock
GlobalLock
GlobalAlloc
EnterCriticalSection
LeaveCriticalSection
MulDiv
HeapAlloc
FlushInstructionCache
GetCurrentProcess
lstrcmpA
GetModuleFileNameA
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
lstrcpynA
lstrcpyA
lstrcatA
IsDBCSLeadByte
FreeLibrary
LoadLibraryExA
GetModuleHandleA
DisableThreadLibraryCalls
CreateThread
GetLastError
RaiseException
SetEnvironmentVariableA
WideCharToMultiByte
LoadLibraryA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetCPInfo
GetOEMCP
SetUnhandledExceptionFilter
TerminateProcess
GetProcAddress
IsBadWritePtr
VirtualFree
HeapCreate
ExitProcess
GetCommandLineA
GetSystemTimeAsFileTime
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
MultiByteToWideChar
HeapReAlloc
HeapDestroy
GetVersionExA
lstrcmpiA
lstrlenW
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
SetStdHandle
InitializeCriticalSection
GetThreadLocale
GetLocaleInfoA
GetACP
FlushFileBuffers
InterlockedExchange
UnregisterClassA
EndDialog
MoveWindow
CheckDlgButton
GetDlgItem
SetRect
DestroyWindow
IsDlgButtonChecked
IsChild
SetWindowLongA
GetWindowTextA
GetWindowTextLengthA
SetWindowPos
SetWindowContextHelpId
MapDialogRect
GetWindow
CreateWindowExA
EnumChildWindows
FindWindowExA
IsWindowVisible
SystemParametersInfoA
CopyRect
wsprintfA
CreateAcceleratorTableA
CharNextA
GetParent
GetClassNameA
RedrawWindow
IsWindow
SendMessageA
GetFocus
EnumThreadWindows
SetFocus
BeginPaint
EndPaint
GetSysColor
CallWindowProcA
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
GetClientRect
FillRect
SetCapture
ReleaseCapture
DestroyAcceleratorTable
GetWindowLongA
SetWindowTextA
DefWindowProcA
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
GetStockObject
GetObjectA
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
DeleteObject
CreateSolidBrush
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
CoTaskMemRealloc
CoTaskMemFree
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
StringFromGUID2
CoTaskMemAlloc
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
SysAllocStringByteLen
VariantChangeType
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
LoadRegTypeLi
VariantInit
VariantClear
OleCreateFontIndirect
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString
SysAllocString
SHSetValueA
SHGetValueA
SHDeleteKeyA
PathFindExtensionA
URLDownloadToFileA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
GetUrlCacheEntryInfoA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ