DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
Static task
static1
Behavioral task
behavioral1
Sample
49e2524b67d3db651eb63a2d42d59ca8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
49e2524b67d3db651eb63a2d42d59ca8_JaffaCakes118
Size
142KB
MD5
49e2524b67d3db651eb63a2d42d59ca8
SHA1
f09eb94e73aa675be1213270ef6b603211875a43
SHA256
be40a7aa941994777eb460b315b468ebfc3ab1e6bc1a179c5ab2fdeafea65e42
SHA512
088ccd4d59bbb4117b6cfe9feffca08d731a1f35c4ac300ddd0e2af203ad342675569bde102aab51e815ca7c9bf89f1735fccd4eeb7444ca42d47169a0b8c3cf
SSDEEP
3072:wEk6AlK+xE24sCTJdMIaTCmYWt55jBpX:06AlJK2yl2TZj
Checks for missing Authenticode signature.
resource |
---|
49e2524b67d3db651eb63a2d42d59ca8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrChrA
wnsprintfA
StrStrIA
InternetSetCookieA
InternetCrackUrlA
RaiseException
LoadLibraryA
GetModuleFileNameA
DeleteCriticalSection
GetThreadLocale
SetThreadLocale
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
GetLastError
GetModuleHandleA
lstrcmpiA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
InitializeCriticalSection
CloseHandle
OpenMutexA
GetProcessHeap
GetVolumeInformationA
GetComputerNameA
HeapAlloc
HeapFree
GetTickCount
GetCurrentProcessId
TerminateThread
WaitForSingleObject
Sleep
ReleaseMutex
CreateThread
CreateFileA
WriteFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InterlockedDecrement
InterlockedIncrement
FreeLibrary
FlushFileBuffers
LCMapStringW
GetStringTypeA
GetStringTypeW
lstrcpynA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
LCMapStringA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
VirtualFree
HeapReAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetCPInfo
GetACP
CharNextW
CharNextA
RegQueryValueExA
RegCreateKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
LoadRegTypeLi
VarUI4FromStr
VariantClear
VariantInit
SysAllocStringLen
UnRegisterTypeLi
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ