DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
37d03dddfd10c1b75cd6cac999e1b22a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
37d03dddfd10c1b75cd6cac999e1b22a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
37d03dddfd10c1b75cd6cac999e1b22a_JaffaCakes118
Size
116KB
MD5
37d03dddfd10c1b75cd6cac999e1b22a
SHA1
d2af55b850b271fb3b77193ee47c9f5811a1fbb6
SHA256
d2d46fcc375f09babe64924d32117720d944d0c80fd8056cbe14027655cf4e12
SHA512
7f74e9cfc59614051cb6d39f3855599d8c2cf762cada50d85f5434191bc7fd33435ecb05dd221a1183e4c278ec671bd9e328ca62453923d7665f9fd57afe04d2
SSDEEP
1536:J61sqa9kxQMLyMuQwQoXXdujvyq5jxECQpVezOSbzs2jxA8nF8o0LpJ3:xqa9HMmM1SuOq58VeE2jxA8neo0L
Checks for missing Authenticode signature.
resource |
---|
37d03dddfd10c1b75cd6cac999e1b22a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCanonicalizeUrlA
ord858
ord4129
ord5710
ord3439
ord4202
ord535
ord3874
ord537
ord2614
ord2096
ord6467
ord6705
ord6784
ord2915
ord3317
ord1200
ord690
ord1988
ord5353
ord5207
ord2818
ord389
ord5572
ord860
ord536
ord926
ord913
ord825
ord823
ord941
ord861
ord4480
ord3571
ord3626
ord3663
ord2414
ord1641
ord1146
ord2859
ord2379
ord4407
ord3402
ord3610
ord567
ord656
ord3582
ord616
ord2864
ord2862
ord3731
ord808
ord556
ord809
ord939
ord1088
ord2122
ord6612
ord2121
ord3021
ord1601
ord2764
ord940
ord859
ord4299
ord3396
ord4274
ord815
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord3953
ord2725
ord1131
ord818
ord668
ord2770
ord356
ord6662
ord6283
ord6282
ord539
ord6199
ord1168
ord2652
ord5981
ord3876
ord4275
ord384
ord540
ord398
ord6502
ord686
ord800
ord700
ord6740
ord4424
ord4627
ord4080
ord3079
ord269
ord826
ord600
ord1578
ord1255
ord1253
ord1570
ord1197
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4398
ord1776
ord4078
ord6055
ord2578
ord4218
ord2023
ord2411
ord4269
ord1243
ord342
ord1182
ord1577
ord1116
ord1176
ord1575
ord1669
??1type_info@@UAE@XZ
_adjust_fdiv
memset
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
__CxxFrameHandler
_CxxThrowException
_initterm
sprintf
_EH_prolog
_mbsicmp
strlen
memcmp
malloc
realloc
free
_purecall
memcpy
atoi
_mbscmp
strcmp
GetProcAddress
HeapDestroy
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrcatA
LoadLibraryA
lstrlenA
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
lstrlenW
GetModuleFileNameA
InterlockedDecrement
GetLastError
GetShortPathNameA
lstrcpyA
LocalFree
FormatMessageA
lstrcpyW
GetWindowsDirectoryA
CloseHandle
Process32First
CreateToolhelp32Snapshot
Module32Next
Module32First
HeapFree
HeapAlloc
GetProcessHeap
LocalAlloc
MultiByteToWideChar
DispatchMessageA
TranslateMessage
GetFocus
LoadBitmapA
SendMessageA
GetDC
GetWindowTextW
GetKeyState
SetCursor
ReleaseDC
EnableWindow
EnumChildWindows
SetWindowLongA
ShowWindow
GetClassNameA
LoadCursorA
CharNextA
GetWindowTextA
SetWindowTextA
CallWindowProcA
MessageBoxA
GetClientRect
SetPixel
RegOpenKeyA
RegQueryInfoKeyA
RegEnumKeyA
RegEnumValueA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
SHGetFileInfoA
ImageList_AddMasked
ImageList_GetImageCount
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
StringFromCLSID
CoCreateFreeThreadedMarshaler
CoTaskMemRealloc
CoCreateInstance
CoUninitialize
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
VariantClear
SysStringLen
SysAllocStringByteLen
SysAllocString
VariantInit
SysFreeString
URLDownloadToFileA
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ