DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4133d95ca5fdf1ce77893f5d529bcaa5_JaffaCakes118.dll
Resource
win7-20240708-en
Target
4133d95ca5fdf1ce77893f5d529bcaa5_JaffaCakes118
Size
124KB
MD5
4133d95ca5fdf1ce77893f5d529bcaa5
SHA1
3a13324e7e2309089a4a776a02720941cd23e4c2
SHA256
d5131f94c549e6717a0f609c7c77ce464af2d4c3d9fd3e6b0de54b34884e406b
SHA512
8add0d6db7c57a605547a58d23d9c222592a7948919252c8b878773007b4b49bdeaa3cf5a275e7ab5d700ef6118f1338cb278c0420726985f65ae39da67a65d4
SSDEEP
3072:InAw9KXA4JMEFzalqD+AQ4HmlCWON2Wc33:IAws1BFKqaf4H+9ON2h3
Checks for missing Authenticode signature.
resource |
---|
4133d95ca5fdf1ce77893f5d529bcaa5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
URLDownloadToFileA
ObtainUserAgentString
UrlMkSetSessionOption
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
FreeLibrary
IsDBCSLeadByte
lstrcpynA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
WideCharToMultiByte
lstrlenW
GetLastError
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
CloseHandle
Sleep
CreateMutexA
ReleaseMutex
lstrcpyW
lstrcatW
CreateProcessA
lstrcatA
LCMapStringW
LCMapStringA
LoadLibraryA
VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
DisableThreadLibraryCalls
lstrcmpiA
lstrcpyA
lstrlenA
GetModuleFileNameA
ReadFile
IsBadCodePtr
FlushFileBuffers
RaiseException
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
SetFilePointer
GetCPInfo
GetTickCount
QueryPerformanceCounter
WriteFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
IsBadWritePtr
VirtualAlloc
GetOEMCP
IsBadReadPtr
SetStdHandle
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
GetProcAddress
GetModuleHandleA
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
GetCurrentProcessId
KillTimer
CharNextA
SetTimer
wsprintfW
wsprintfA
RegEnumKeyExA
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
ShellExecuteA
SHGetSpecialFolderPathA
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
VarUI4FromStr
DispCallFunc
VariantClear
VariantInit
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysStringLen
SysAllocString
UnRegisterTypeLi
RegisterTypeLi
PathFindExtensionA
InitCommonControlsEx
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ