DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4b4928ca64e0e2d940d823739fdcd025_JaffaCakes118.dll
Resource
win7-20240704-en
Target
4b4928ca64e0e2d940d823739fdcd025_JaffaCakes118
Size
660KB
MD5
4b4928ca64e0e2d940d823739fdcd025
SHA1
6b986030baf751ac6301b1e0356aaf0bdaf6adbe
SHA256
6792cc4ec14adc8df045df197c8600a01cbb14e6990f8a411b608570fba1625b
SHA512
5ada705889320ec389d4c54fe41116e4b2733a92253f651ceda95c24c3cd9bde542e146277bee115725622f3019537b2da71240cf6afd419ade98e1286d79db6
SSDEEP
12288:1pn/325kJswbUhu0gVAFd3zcBZCtQh8TSs7FbVhS8Ni/sX91Th4l38H3vFTt:7/36yswh0pneZ8TSsDTh4l3MvFT
Checks for missing Authenticode signature.
resource |
---|
4b4928ca64e0e2d940d823739fdcd025_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathMatchSpecW
PathIsDirectoryW
PathFileExistsW
UrlUnescapeW
StrStrIW
UrlGetPartW
UrlEscapeW
StrCmpIW
GetSystemTimeAsFileTime
CompareStringW
CompareStringA
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryA
GetDriveTypeA
GetProcessHeap
SetEndOfFile
CreateFileA
GetModuleHandleA
GetTimeZoneInformation
CreateFileW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentDirectoryA
SetFilePointer
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetOEMCP
GetACP
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
HeapReAlloc
VirtualAlloc
WriteFile
GetFullPathNameW
InitializeCriticalSection
LeaveCriticalSection
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
Sleep
InterlockedExchange
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
SetEnvironmentVariableA
ExitThread
CreateThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
EnumChildWindows
RealGetWindowClassW
GetWindowTextW
SendMessageW
SetWindowLongW
CallWindowProcW
wsprintfW
GetWindowLongW
SetWindowTextW
SetWindowPos
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateGuid
VariantClear
VariantInit
VariantChangeType
VariantCopy
VarBstrCmp
SysStringLen
SysAllocString
SysFreeString
inet_addr
RpcStringFreeW
UuidToStringW
UrlMkGetSessionOption
MapAndLoad
UnMapAndLoad
SHCreateDirectoryExW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ