DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
96c782ef8db5ad4e9b7f82fe6c467cfd_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
96c782ef8db5ad4e9b7f82fe6c467cfd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
96c782ef8db5ad4e9b7f82fe6c467cfd_JaffaCakes118
Size
132KB
MD5
96c782ef8db5ad4e9b7f82fe6c467cfd
SHA1
a738a6a3d2bc59535c5fb3a1631ab17960831293
SHA256
7b060bff72cdda68b0980053a78ace0ea02dac0790f1375f94d8816907631cb8
SHA512
407d1272c2b1cb356c2c01723b93ed6c432ab1429eb9bf0387ca2e198c092d51a5da5b1ed68ef0824e19fff3e4ae80a054fbbffb445827d73a65400761aaf410
SSDEEP
1536:FEy226+Izmb/BbcU24cTwLBtY/T1fSRod1onY+CQuK87D97KeqoBNPrAzNOY:ey225f/BbcSCwtPRejnRX9tqorUzN
Checks for missing Authenticode signature.
resource |
---|
96c782ef8db5ad4e9b7f82fe6c467cfd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
CloseHandle
WriteFile
CreateFileA
FindClose
FindFirstFileA
SetFileTime
GetFileTime
LocalFree
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetEnvironmentVariableA
CompareStringW
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
GetTempPathA
CompareStringA
SetEndOfFile
ReadFile
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetModuleHandleA
GetProcAddress
LCMapStringW
LCMapStringA
LoadLibraryA
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
GetPrivateProfileSectionA
GetTickCount
lstrlenA
GetSystemDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetWindowsDirectoryA
DeleteFileA
WritePrivateProfileStringA
GetLastError
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
HeapSize
VirtualAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
RtlUnwind
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
RaiseException
TlsAlloc
TlsFree
SetLastError
HeapAlloc
HeapFree
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapReAlloc
GetEnvironmentVariableA
wsprintfA
EnumChildWindows
SetWindowTextA
GetClassNameA
GetWindowTextA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
ShellExecuteA
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateGuid
CoGetClassObject
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SysFreeString
VariantCopy
VariantChangeType
VariantClear
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetQueryDataAvailable
InternetReadFile
CreateUrlCacheEntryA
ord16
ord17
ord20
ord15
ord23
ord31
ord30
ord18
ord57
ord32
ord58
ord21
gethostbyname
ioctlsocket
socket
WSAStartup
sendto
recvfrom
htons
CoInternetGetSession
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ