DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5d8e2fa6bc5bf313eb5a11f0f52cf4e6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
5d8e2fa6bc5bf313eb5a11f0f52cf4e6_JaffaCakes118
Size
96KB
MD5
5d8e2fa6bc5bf313eb5a11f0f52cf4e6
SHA1
87f327603cab9e577b38d2ba7aa7d1921cd2a0d4
SHA256
5ed39dbf9dc4bea342a494abb558c83d4f1fe967e751441037d94df3afeaee57
SHA512
82ac1e8f2d53b5c53a0b74111525de6a98526b2aeaf6519f61f2f7ffb8ecbd8dea484540fdb0f6bfa106d9f84b094340e5cbeb4e2b316552c17c16b4ff277f43
SSDEEP
1536:8ICuE9q4byzBRMtfWwWTTfIcoJbyi4oGvMioH4uQkpGkr:fCOfMtOwnuc0MioH3Vr
Checks for missing Authenticode signature.
resource |
---|
5d8e2fa6bc5bf313eb5a11f0f52cf4e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStringTypeExA
GetThreadLocale
ReadFile
CreateDirectoryA
GetEnvironmentVariableA
GetTempPathA
CreateThread
LocalFree
MultiByteToWideChar
SetEnvironmentVariableA
CompareStringW
CompareStringA
DebugBreak
lstrlenA
DeleteFileA
WinExec
SetFilePointer
WriteFile
CreateFileA
GetFileSize
CloseHandle
lstrlenW
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapDestroy
GetModuleHandleA
GetEnvironmentStringsW
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
InitializeCriticalSection
HeapCreate
GetVersionExA
GetSystemInfo
HeapAlloc
GetModuleFileNameA
OutputDebugStringA
GetLastError
WideCharToMultiByte
RtlUnwind
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
HeapFree
GetCPInfo
GetACP
GetOEMCP
ExitProcess
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
wvsprintfA
CharNextA
LoadStringA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
SetNamedSecurityInfoA
SetEntriesInAclA
GetNamedSecurityInfoA
GetUserNameA
StringFromCLSID
CoTaskMemFree
VariantClear
SysFreeString
LoadRegTypeLi
SysStringLen
LoadTypeLi
SysAllocString
HttpSendRequestA
InternetCrackUrlA
InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetConnectA
InternetAttemptConnect
HttpAddRequestHeadersA
HttpOpenRequestA
InternetCloseHandle
Netbios
ord21
ord16
ord18
ord57
ord32
ord58
ord15
ord30
ord31
ord23
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ