DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientLocid
GetClientTicket
Static task
static1
Behavioral task
behavioral1
Sample
3a9488cd4633d020f9acf11ec8abab9c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
3a9488cd4633d020f9acf11ec8abab9c_JaffaCakes118
Size
137KB
MD5
3a9488cd4633d020f9acf11ec8abab9c
SHA1
e6055c165d36a895d1c3882b9024aacf4847e41e
SHA256
ac57f7353d17cf8f60af24fee0fbe290bf9a9d7ec5932177ae4bf8b8f250fb1f
SHA512
7a9459866f95ebdd532e0a94549cacc7b90905b6c44f9d40ca2507e8bf4f53c4222ad98871196fbad5ea1c3a512d6faa67f2da31c9b95c7d17a138801caf5cff
SSDEEP
3072:hVXyIcP7SqPEFNA9+sjq/hxHRpM5wpAxrBH9b:ml+sjgt71Od
Checks for missing Authenticode signature.
resource |
---|
3a9488cd4633d020f9acf11ec8abab9c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetGetConnectedState
HttpQueryInfoA
InternetSetCookieA
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestA
PathFileExistsA
StrStrIA
wnsprintfA
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetProcAddress
lstrlenA
lstrlenW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
lstrcmpiA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
HeapReAlloc
HeapAlloc
LoadLibraryA
TerminateThread
HeapFree
InterlockedDecrement
LocalFree
CloseHandle
GetCurrentProcess
CreateProcessA
WriteFile
CreateFileA
GetTempPathA
lstrcmpA
SleepEx
ReleaseMutex
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
GetVolumeInformationA
GetSystemTimeAsFileTime
SetFilePointer
InterlockedIncrement
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetProcessHeap
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
CharNextA
CharNextW
GetLengthSid
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
OpenProcessToken
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
LoadRegTypeLi
VarUI4FromStr
SysAllocStringLen
VariantClear
VariantInit
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientLocid
GetClientTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ