DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
42cb1226385a67388c416d4ee0155489_JaffaCakes118.dll
Resource
win7-20240708-en
Target
42cb1226385a67388c416d4ee0155489_JaffaCakes118
Size
260KB
MD5
42cb1226385a67388c416d4ee0155489
SHA1
dba56693ecc0e0387c9a43c2d317e5417eaee393
SHA256
2c486af5c53c6d83564b9231f914e0f62b36007cbd7d68da1a23e2393e6909d7
SHA512
8edddfed4a8fac473048e352afb7dba04f3f57e88ef7d7f652defc32c0cc336cf60bc6872be99f700c3a507573218900883186d0c55bc9676165d74357f8064a
SSDEEP
3072:KoEX4TWzM6DXgMw9P65CSeYcLrRzbnDHGYgyztWDzUu1EDFBJKyzc30xo1qY/tdx:wwgw9P65feFrlbD3giazUbBij+Y7x
Checks for missing Authenticode signature.
resource |
---|
42cb1226385a67388c416d4ee0155489_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
Sleep
SetEvent
CreateFileW
SetFilePointer
WriteFile
InterlockedIncrement
InterlockedDecrement
FreeLibrary
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
DisableThreadLibraryCalls
CloseHandle
RaiseException
GetLastError
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetSystemTime
GetTempFileNameW
CreateProcessW
WideCharToMultiByte
LoadLibraryA
CreateFileA
ResetEvent
WaitForSingleObject
OpenEventW
GetWindowsDirectoryW
GetTickCount
LocalAlloc
lstrlenW
FormatMessageW
GetModuleFileNameW
LocalFree
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetStringTypeA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
FreeEnvironmentStringsA
GetStringTypeW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
MessageBoxW
CharNextW
UnregisterClassA
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysFreeString
SysAllocString
LoadRegTypeLi
StrToIntW
InternetConnectW
InternetAttemptConnect
InternetCloseHandle
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetReadFile
HttpQueryInfoW
InternetOpenW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ