DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
969f6a27a8255429a9f41cda1948a1c8_JaffaCakes118.dll
Resource
win7-20240729-en
Target
969f6a27a8255429a9f41cda1948a1c8_JaffaCakes118
Size
657KB
MD5
969f6a27a8255429a9f41cda1948a1c8
SHA1
ac8da8d4f0be82a1ff49cf686996e82a64fac980
SHA256
de26118ad7d7b1419cb23fac564ce07160cb550ab22acae4ae8aba6ff770805d
SHA512
ada0903515b30f24b6c4bd864b732a66547cddecbadd3e3fdfbebede70b6c5a22f2111f1aaec8d846c62410f83d88da325a0bda5a4e0bf19c107ed89dd0f3a89
SSDEEP
12288:99sIkV2N0I3uSoKartW7eaNorRMuFQxoQxLoQRiYS/DAESiZ5xehbq0tXznTBXe2:99sA0I/+0NqNQxoB2iYSboBTBXeNG
Checks for missing Authenticode signature.
resource |
---|
969f6a27a8255429a9f41cda1948a1c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathMatchSpecW
PathIsDirectoryW
PathFileExistsW
UrlUnescapeW
StrStrIW
UrlGetPartW
UrlEscapeW
StrCmpIW
GetSystemTimeAsFileTime
CompareStringW
CompareStringA
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryA
GetDriveTypeA
GetProcessHeap
SetEndOfFile
CreateFileA
GetModuleHandleA
GetTimeZoneInformation
CreateFileW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentDirectoryA
SetFilePointer
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetOEMCP
GetACP
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
HeapReAlloc
VirtualAlloc
WriteFile
GetFullPathNameW
InitializeCriticalSection
LeaveCriticalSection
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
Sleep
InterlockedExchange
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
SetEnvironmentVariableA
ExitThread
CreateThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
EnumChildWindows
RealGetWindowClassW
GetWindowTextW
SendMessageW
SetWindowLongW
CallWindowProcW
wsprintfW
GetWindowLongW
SetWindowTextW
SetWindowPos
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateGuid
VariantClear
VariantInit
VariantChangeType
VariantCopy
VarBstrCmp
SysStringLen
SysAllocString
SysFreeString
inet_addr
RpcStringFreeW
UuidToStringW
UrlMkGetSessionOption
MapAndLoad
UnMapAndLoad
SHCreateDirectoryExW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ