DllCanUnloadNow
DllGetClassObject
DllGetData2
DllRegisterServer
GreatBall
GreatBall1
Static task
static1
Behavioral task
behavioral1
Sample
82d6d1e70227642d42860a7da603b248_JaffaCakes118.dll
Resource
win7-20240708-en
Target
82d6d1e70227642d42860a7da603b248_JaffaCakes118
Size
168KB
MD5
82d6d1e70227642d42860a7da603b248
SHA1
b51b3e23dbd478e6b14d210497b875814a4d2ae1
SHA256
4386cc20515a86cd4e832f2804c46d18528603c95a4da93d5bdb91cdc05c7463
SHA512
5977e3e14cfe601cc1e10972d7445915df2cb2c782cb919416987dba4dc8419cbe9611d13bc9f78cda61833ffa11c76fd5e624ce30cb623c2f4f8ddb486e5dd4
SSDEEP
3072:KmDmBQw0bv0Uo7a+7vyNafgXo8OmojbKAWD:Kc8l7aCqpDO/J
Checks for missing Authenticode signature.
resource |
---|
82d6d1e70227642d42860a7da603b248_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCloseHandle
InternetAttemptConnect
HttpQueryInfoA
InternetCrackUrlA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetConnectA
GetSystemTime
CloseHandle
CreateFileA
GetVersion
WaitForSingleObject
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
FreeLibrary
LoadLibraryA
GetFileAttributesA
DeleteFileA
GetTempPathA
GetSystemDirectoryA
OpenMutexA
CreateMutexA
CreateDirectoryA
WriteFile
ReleaseMutex
GetLocalTime
lstrlenW
GetEnvironmentVariableA
MoveFileA
GetTempFileNameA
SetFileAttributesA
MoveFileExA
EnterCriticalSection
SetFilePointer
lstrcatA
GetShortPathNameA
LocalFree
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
ReadFile
LeaveCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DisableThreadLibraryCalls
GetWindowsDirectoryA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetModuleFileNameA
GetProcAddress
LCMapStringA
LCMapStringW
IsBadWritePtr
CompareStringW
VirtualAlloc
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
FlushFileBuffers
CompareStringA
GetFileSize
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
GetTimeZoneInformation
RtlUnwind
RaiseException
GetCommandLineA
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetModuleHandleA
GetDC
ReleaseDC
ShowWindow
SetWindowPos
SetActiveWindow
SetForegroundWindow
SetFocus
BringWindowToTop
wsprintfA
GetDeviceCaps
GetNamedSecurityInfoA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
SetNamedSecurityInfoA
GetUserNameA
RegCloseKey
SetEntriesInAclA
ShellExecuteExA
CoCreateInstance
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SysAllocString
VariantChangeType
VariantClear
SysFreeString
ord23
ord15
ord21
ord16
ord57
ord32
ord58
ord30
ord31
UuidCreate
UuidToStringA
Netbios
DllCanUnloadNow
DllGetClassObject
DllGetData2
DllRegisterServer
GreatBall
GreatBall1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ