DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
467a4fb220804b8e55e8a5607845aa01_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
467a4fb220804b8e55e8a5607845aa01_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
467a4fb220804b8e55e8a5607845aa01_JaffaCakes118
Size
204KB
MD5
467a4fb220804b8e55e8a5607845aa01
SHA1
02b43611a22a86c79fdc26ebbee481e96fc86251
SHA256
796423297a599658e7f73279a451cc29a50f5ab0eeef9901f508c7aa8e553e1f
SHA512
97966a7b01b263bc9a6e8ae2eb0694ba6a3ed89fb1807db9ea1a903958efd3f821641f7c7fd0ffef989459563e66cd4c4a51ff77072a236d4bcf321ce20474e0
SSDEEP
3072:qSAXYRcakWwIzKLi9nYqXRuIjkz8Yg4eBlBsDS9E:wXYeuKL+YMR1yY4YE
Checks for missing Authenticode signature.
resource |
---|
467a4fb220804b8e55e8a5607845aa01_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSACleanup
WSAStartup
HttpSendRequestA
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetConnectA
HttpOpenRequestA
GetAdaptersInfo
PathRemoveFileSpecA
PathIsDirectoryA
PathFileExistsA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
CompareStringW
InterlockedDecrement
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
DisableThreadLibraryCalls
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
DeleteCriticalSection
Sleep
CreateDirectoryA
UnhandledExceptionFilter
LoadLibraryA
lstrcpyA
lstrcatA
InterlockedIncrement
GetCurrentThreadId
OutputDebugStringA
CloseHandle
ReadFile
CreateFileA
WriteFile
GetVersionExA
ExpandEnvironmentStringsA
LocalFree
FormatMessageA
CompareStringA
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
FatalAppExitA
SetFilePointer
SetEnvironmentVariableA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
FlushFileBuffers
GetLocaleInfoW
GetProcAddress
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
HeapSize
TerminateProcess
ExitProcess
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
RaiseException
GetVersion
GetCommandLineA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
GetCurrentProcess
wsprintfA
CharNextA
OemToCharA
CharToOemA
FindWindowA
SendMessageA
MessageBoxA
UnhookWindowsHookEx
FindWindowExA
GetWindowTextA
CallNextHookEx
GetActiveWindow
GetWindowThreadProcessId
SetWindowsHookExA
RegDeleteValueA
RegEnumKeyA
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
OleRun
CoTaskMemFree
VariantChangeType
SysStringByteLen
SysAllocStringLen
SysReAllocStringLen
SafeArrayGetElemsize
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
GetErrorInfo
SetErrorInfo
CreateErrorInfo
SysAllocStringByteLen
VariantCopy
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayRedim
SafeArrayCreate
VariantClear
VariantInit
SysStringLen
LoadRegTypeLi
RegisterTypeLi
SysAllocString
LoadTypeLi
VarUI4FromStr
SysFreeString
SafeArrayCreateVector
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ