DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6f0cacae87942b9d02cb1460fd01c406_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6f0cacae87942b9d02cb1460fd01c406_JaffaCakes118
Size
180KB
MD5
6f0cacae87942b9d02cb1460fd01c406
SHA1
3b5b5a5dbd38c6f3e2378f54eb184440b2eeaae1
SHA256
66d956afe62c2a5c000591e3e52386d6911c50313df337eda381d0b375ddf34e
SHA512
c3800d525a44c62329f3b9506e81e22b5f17a85da263757695c565bb70db0d4a689ffc1cbc3a2cbb54ed57b78c24f18707dd60c4a3adf41015edaa5a10ef5c61
SSDEEP
3072:zKiEo7YnVqN/2mxT6km6lkyp+R6cszfttbx0+bsOtbt4U20:+C7YVeJxT68r7jxRbXm
Checks for missing Authenticode signature.
resource |
---|
6f0cacae87942b9d02cb1460fd01c406_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HttpAddRequestHeadersA
InternetCloseHandle
InternetQueryDataAvailable
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetOpenA
InternetGetConnectedState
InternetConnectA
connect
closesocket
WSAStartup
gethostbyname
WSACleanup
inet_addr
socket
htons
GetCurrentProcessId
QueryPerformanceCounter
VirtualProtect
VirtualQuery
GetTickCount
GetAtomNameA
FreeLibrary
CloseHandle
WriteFile
CreateFileA
GetCurrentThread
GlobalGetAtomNameA
GetConsoleTitleA
GetTempPathA
GetCurrentDirectoryA
GlobalFindAtomA
IsProcessorFeaturePresent
GetProcAddress
LoadLibraryA
GetVersion
FindAtomA
GetCurrentProcess
GetWindowsDirectoryA
GetComputerNameA
GetSystemDirectoryA
WideCharToMultiByte
lstrcpyA
lstrcatA
lstrlenA
GetLocalTime
lstrcpyW
lstrlenW
GetModuleFileNameA
ReadFile
GetFileSize
TerminateProcess
WaitForSingleObject
DeleteFileA
Sleep
MultiByteToWideChar
lstrcmpA
LCMapStringA
lstrcpynW
lstrcatW
lstrcmpW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiA
CreateThread
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetStdHandle
ExitProcess
VirtualFree
HeapSize
HeapCreate
HeapDestroy
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetOEMCP
GetCPInfo
GetProcessHeap
GetCommandLineA
GetCurrentThreadId
HeapReAlloc
GetSystemInfo
VirtualAlloc
RtlUnwind
GetSystemTimeAsFileTime
LCMapStringW
GetStringTypeA
GetStringTypeW
lstrcpynA
SetHandleCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
HeapAlloc
HeapFree
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CharNextA
CharLowerA
wsprintfA
UnregisterClassA
CharUpperW
GetWindowDC
FindWindowA
GetClassLongA
GetDC
IsWindowVisible
GetSysColor
GetWindowLongA
GetWindow
GetFocus
GetCapture
GetDesktopWindow
CharUpperA
GetCursor
GetClassNameA
GetActiveWindow
IsWindowEnabled
GetBkMode
GetDeviceCaps
GetBkColor
GetTextColor
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
GetUserNameA
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
SHGetSpecialFolderPathA
ShellExecuteExA
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
VarUI4FromStr
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysAllocStringLen
SysStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ