DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SetupDLLEnvironment
Static task
static1
Behavioral task
behavioral1
Sample
451ac90b3b6448e052cc8f8fc08859fc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
451ac90b3b6448e052cc8f8fc08859fc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
451ac90b3b6448e052cc8f8fc08859fc_JaffaCakes118
Size
188KB
MD5
451ac90b3b6448e052cc8f8fc08859fc
SHA1
ff73844ba7191c61844073637223ec60b7ee5584
SHA256
1b803f7e996f963e2787e0f597d41bea4fbddeb052382294cd24863cc20d6eaa
SHA512
3e1178a239e2316b452e2b74bbab33cd0b9dae57b14d4eceb840dd5b61358b08639f1f01ec9a56d59f32ecceda921e0e39209f99f6cb8a55050089934d8dbf21
SSDEEP
3072:hdI8Csu3vSUBfF+K2p0SukHK/BEup8CnJJ3MwlZ6NSU9kGQla/H+IaY:+qUBCp0SukHk+u573llZgSaXQl57Y
Checks for missing Authenticode signature.
resource |
---|
451ac90b3b6448e052cc8f8fc08859fc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CoInternetGetSession
FindMimeFromData
InternetCanonicalizeUrlW
InternetCombineUrlW
ord14
WideCharToMultiByte
GetProcAddress
LoadLibraryA
lstrcpyA
MultiByteToWideChar
lstrlenA
HeapDestroy
FreeLibrary
lstrlenW
GetModuleFileNameA
Sleep
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
lstrcatA
EnterCriticalSection
CreateEventA
MapViewOfFile
CreateFileMappingA
SetEnvironmentVariableA
GetCurrentThreadId
UnmapViewOfFile
CloseHandle
OpenFileMappingA
ReleaseMutex
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
GetVersionExA
GetCurrentThread
GetCurrentProcess
DisableThreadLibraryCalls
GetLastError
CreateMutexA
GetCurrentProcessId
WaitForSingleObject
LocalFree
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetPrivateProfileSectionA
WritePrivateProfileStringA
SetLastError
ExpandEnvironmentStringsA
GetEnvironmentVariableA
GetFileAttributesA
wsprintfA
CharNextA
RegSetValueExA
RegFlushKey
RegEnumValueA
RegEnumKeyA
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
GetUserNameA
InitializeSecurityDescriptor
RegCreateKeyExA
SetSecurityDescriptorDacl
RegQueryValueExA
RegCloseKey
CLSIDFromString
CoCreateGuid
CoCreateInstance
CLSIDFromProgID
RegisterTypeLi
SysAllocString
LoadTypeLi
SysStringLen
SysAllocStringLen
LoadRegTypeLi
SysFreeString
wcsncpy
??3@YAXPAX@Z
memcmp
swprintf
_purecall
??2@YAPAXI@Z
memcpy
wcscpy
wcslen
memset
fread
wcscmp
wcsrchr
sprintf
wcschr
wcsstr
fclose
fseek
fopen
_stat
__dllonexit
wcspbrk
wcsncmp
__CxxFrameHandler
atof
strcpy
swscanf
wcscat
_snwprintf
memmove
_CxxThrowException
??0exception@@QAE@ABV0@@Z
strncpy
??0exception@@QAE@XZ
??1exception@@UAE@XZ
strlen
wcstoul
_mbsicmp
_mbslwr
strcat
fwrite
rand
srand
time
iswdigit
strncmp
_initterm
_onexit
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
strncat
strstr
strrchr
malloc
_wcslwr
_wcsicmp
_wcsnicmp
strchr
realloc
_adjust_fdiv
atoi
_mbsdec
_stricmp
free
strcmp
_snprintf
_mbschr
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SetupDLLEnvironment
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE