DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3fbf50454effe593af2ae2c6d7e4b2b2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
3fbf50454effe593af2ae2c6d7e4b2b2_JaffaCakes118
Size
288KB
MD5
3fbf50454effe593af2ae2c6d7e4b2b2
SHA1
b0e5d2dc4af1230161c5a1466b352e053ad43f9b
SHA256
6e041a01997a23871129fc882c9c71e5f11fe955b32bdd2d1366c4f943cda626
SHA512
a267a2cd1e1728c9e22a89442ca635c1bde77ae68368db0879709547c1a0dab3dcbf8b94cddac200b9d29bddf15585a77cf4978dbc3e168bede92be3970b52cc
SSDEEP
6144:tWRTk/wE66i90be0FYIA0Hknt2TkH8k9Sm:tWRTk4E1BUNtaxm
Checks for missing Authenticode signature.
resource |
---|
3fbf50454effe593af2ae2c6d7e4b2b2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
LeaveCriticalSection
CloseHandle
CreateProcessA
GetTempPathA
Sleep
GlobalUnlock
GlobalLock
GlobalAlloc
FlushInstructionCache
GetCurrentProcess
lstrcmpA
MulDiv
GetCurrentThreadId
SetLastError
GetModuleFileNameA
LockResource
DisableThreadLibraryCalls
SetThreadLocale
GetThreadLocale
VirtualAlloc
GetProcAddress
LoadLibraryA
IsBadReadPtr
VirtualFree
HeapFree
GetProcessHeap
HeapAlloc
ReadFile
SetFilePointer
CreateFileA
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
IsDBCSLeadByte
InterlockedDecrement
InterlockedIncrement
VirtualProtect
lstrcmpiA
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
lstrlenA
GetStartupInfoA
SetHandleCount
GetFileType
SetStdHandle
GetCurrentDirectoryA
GetFullPathNameA
GetConsoleMode
GetConsoleCP
HeapSize
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
ExitProcess
HeapCreate
HeapDestroy
GetCommandLineA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
VirtualQuery
GetSystemInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetEnvironmentVariableA
TerminateProcess
CompareStringW
CompareStringA
SetEndOfFile
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
IsProcessorFeaturePresent
InterlockedCompareExchange
GetVersionExA
GetLocaleInfoA
GetACP
InterlockedExchange
LocalFree
GetLastError
DeleteCriticalSection
InitializeCriticalSection
CreateThread
WaitForSingleObject
RaiseException
lstrlenW
WideCharToMultiByte
FreeEnvironmentStringsA
MultiByteToWideChar
GetObjectA
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
DeleteObject
GetStockObject
UnregisterClassA
SetTimer
KillTimer
GetForegroundWindow
GetWindowThreadProcessId
GetActiveWindow
GetSystemMetrics
SetForegroundWindow
SetActiveWindow
wsprintfA
CreateAcceleratorTableA
IsWindow
GetDesktopWindow
SetFocus
GetFocus
GetWindow
DestroyAcceleratorTable
BeginPaint
EndPaint
CallWindowProcA
FillRect
ReleaseCapture
GetClassNameA
GetDlgItem
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
GetClientRect
SetWindowPos
MoveWindow
GetSysColor
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
DefWindowProcA
SendMessageA
ShowWindow
DestroyWindow
CreateWindowExA
GetWindowLongA
SetWindowLongA
CharNextA
AttachThreadInput
CoInitialize
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
RegisterTypeLi
UnRegisterTypeLi
OleCreateFontIndirect
SysStringByteLen
SysAllocString
SysAllocStringLen
LoadTypeLi
LoadRegTypeLi
DispCallFunc
SysStringLen
VariantClear
VariantInit
VarUI4FromStr
SysFreeString
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA
RegDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ