DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5c9e15fd1265179dc6b6e7fd8e50d53a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
5c9e15fd1265179dc6b6e7fd8e50d53a_JaffaCakes118
Size
292KB
MD5
5c9e15fd1265179dc6b6e7fd8e50d53a
SHA1
e5cfa7341c9962b05cf754aa42110427b383066e
SHA256
41ca821c56a094130f30013fa15d6a47d7bb627d66f0d1275dee73f0f45c6c2c
SHA512
d0706786cd4840fa0f1c2ebaff75f4e158b7c6bce0baff2d2e56f11b06f9dba667f480bb315bd046f3d4add6dd29afd2fa0e51bf0f5f2b7ace7a784064f8ce1c
SSDEEP
6144:A+yvGb6RU/VjE2TicFkRYFNvcFkRYFN3b:ADvGmRU9AXcf1cf
Checks for missing Authenticode signature.
resource |
---|
5c9e15fd1265179dc6b6e7fd8e50d53a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteUrlCacheEntry
URLDownloadToFileA
GetShortPathNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
DeleteFileA
GetTempFileNameA
GetTempPathA
CloseHandle
WriteFile
CreateFileA
TerminateProcess
lstrcmpA
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
WinExec
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrlenA
SetEndOfFile
ReadFile
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetFilePointer
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
TlsGetValue
SetLastError
TlsFree
TlsAlloc
HeapSize
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
LCMapStringW
LCMapStringA
ExitProcess
GetOEMCP
GetACP
GetCPInfo
RaiseException
GetVersion
GetCommandLineA
ExitThread
TlsSetValue
CreateThread
ResumeThread
RtlUnwind
MultiByteToWideChar
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
HeapAlloc
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapFree
InterlockedExchange
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetFileAttributesA
HeapReAlloc
LocalFree
ShowWindow
SendMessageA
GetWindow
GetFocus
GetWindowRect
GetSysColor
CharNextA
CharUpperA
wsprintfA
IsWindow
DestroyWindow
GetClientRect
LoadStringA
BeginPaint
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RegisterWindowMessageA
GetDlgItem
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
GetClassInfoExA
LoadCursorA
RegisterClassExA
CreateAcceleratorTableA
GetParent
GetClassNameA
RedrawWindow
SetWindowPos
GetDesktopWindow
FillRect
EndPaint
GetDC
ReleaseDC
IsChild
SetFocus
CallWindowProcA
GetWindowLongA
DefWindowProcA
SetWindowLongA
CreateWindowExA
GetStockObject
GetObjectA
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetDeviceCaps
DeleteObject
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleLockRunning
CoUninitialize
CoInitialize
CLSIDFromProgID
CLSIDFromString
StringFromCLSID
VariantCopy
VariantChangeType
OleCreateFontIndirect
SysAllocStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
VariantInit
VarUI4FromStr
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
SysStringLen
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ