DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7890059aea1c5146c3af4a3df0a6cf18_JaffaCakes118.dll
Resource
win7-20240704-en
Target
7890059aea1c5146c3af4a3df0a6cf18_JaffaCakes118
Size
168KB
MD5
7890059aea1c5146c3af4a3df0a6cf18
SHA1
0cec50873fdc49e7ba21734aecb3bd5f82ff11ab
SHA256
d8118fef81c393764b93e84f8d20f20af0e027d803493f5cd71476d766ecfaa5
SHA512
624be1c63794016c8c14097391e101a4a00d809ed9c902a05bebef30c36ae0bd015136ba796d77b465ba5764ae518067c78fd430cbef3662b7c9b13187e9e4d4
SSDEEP
3072:cdc26HBJO47roOOAvYTGXb7upafKNYIXvRmtzk:L26hoQrfvYq7SNdX5I
Checks for missing Authenticode signature.
resource |
---|
7890059aea1c5146c3af4a3df0a6cf18_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CharLowerBuffA
GetWindowPlacement
PostMessageA
IsWindow
SendMessageA
CharNextA
UnregisterClassA
GetPropA
URLDownloadToCacheFileA
RegDeleteKeyA
RegCloseKey
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
InternetCrackUrlA
DeleteUrlCacheEntry
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
WaitForSingleObject
CreateMutexA
LocalFree
GetLastError
SetEvent
WideCharToMultiByte
MultiByteToWideChar
ReleaseMutex
CreateThread
OpenEventA
LocalAlloc
CloseHandle
LoadResource
IsDBCSLeadByte
lstrlenA
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
GetModuleHandleA
FindResourceA
LoadLibraryExA
lstrcmpiA
InterlockedIncrement
RaiseException
GetModuleFileNameA
EnterCriticalSection
FreeLibrary
SizeofResource
LeaveCriticalSection
InterlockedDecrement
DisableThreadLibraryCalls
GetVersionExA
WriteFile
MapViewOfFile
UnmapViewOfFile
HeapFree
GetProcAddress
GetProcessHeap
HeapAlloc
SetFilePointer
OpenFileMappingA
LoadLibraryA
CreateFileA
Sleep
OpenMutexA
TerminateProcess
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetStdHandle
ExitProcess
HeapSize
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
IsDebuggerPresent
HeapReAlloc
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
SysStringByteLen
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
SysAllocString
VarBstrCat
LoadRegTypeLi
VarUI4FromStr
LoadTypeLi
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ