DllCanUnloadNow
DllGetClassObject
DllMProcedure
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
97517c90893956ab5fb875af06eec40c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
97517c90893956ab5fb875af06eec40c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
97517c90893956ab5fb875af06eec40c_JaffaCakes118
Size
242KB
MD5
97517c90893956ab5fb875af06eec40c
SHA1
2a3aec1095a9f5dc60c00088a4da978850ccf0a1
SHA256
0f8bdee427888ae2ed1292f5f37e9e9bfb01250784e8ec0ecdda734dfe91a9bb
SHA512
9aaa7b7d4481cd57e616dc97ae6fcbd80f46eef6c8b60af5613f0fcb9554e6c54c39b509dfef063a8d46f4323c18b5c7e612b5063b2bf4befbd68b057ecb332e
SSDEEP
6144:SqVKNBRopYJu3WnmRHWVHUTY7Y68XBpZunp+8ICwWbx:SqVKNBRop13q1t0lXBpZunp+8T
Checks for missing Authenticode signature.
resource |
---|
97517c90893956ab5fb875af06eec40c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UrlMkGetSessionOption
URLDownloadToFileW
InternetQueryOptionW
InternetCrackUrlW
HttpSendRequestW
HttpQueryInfoW
InternetConnectW
InternetOpenW
InternetSetOptionW
HttpOpenRequestW
InternetReadFile
InternetCloseHandle
InternetQueryOptionA
UuidToStringW
RpcStringFreeW
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
CryptStringToBinaryW
CryptBinaryToStringW
SHDeleteKeyW
SHGetValueW
SHDeleteValueW
SHSetValueW
StrStrIW
StrCmpIW
SHRegSetUSValueW
UrlEscapeW
PathStripPathW
UrlGetPartW
StrStrIA
UnMapAndLoad
MapAndLoad
GetACP
GetCPInfo
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetSystemTime
CreateEventW
CloseHandle
OpenProcess
TerminateProcess
OpenMutexW
WaitForSingleObject
CreateProcessW
SetEvent
CreateMutexW
GetCommandLineW
ExitProcess
CreateThread
ExitThread
Sleep
GetModuleFileNameW
lstrlenW
lstrcpyW
DeleteFileW
lstrcpynA
InterlockedIncrement
InterlockedDecrement
lstrcmpiA
FreeLibrary
IsBadReadPtr
VirtualProtect
GlobalAlloc
FlushInstructionCache
GetCurrentProcess
GlobalFree
ResetEvent
MoveFileExW
GetProcAddress
LoadLibraryA
ExpandEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetFileType
GetTempFileNameW
GetTickCount
LocalAlloc
LocalFree
GetLastError
GetOEMCP
SystemTimeToFileTime
VirtualQuery
GetSystemInfo
GetSystemWindowsDirectoryW
GetVolumeInformationW
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
WriteFile
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersion
GetCurrentProcessId
GetCurrentThreadId
CreateToolhelp32Snapshot
Thread32First
Thread32Next
OpenThread
SuspendThread
ResumeThread
GetModuleFileNameA
GetStdHandle
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
IsValidCodePage
GetLocalTime
SetHandleCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetEnvironmentVariableW
GetCommandLineA
IsDebuggerPresent
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualAlloc
PeekMessageW
TranslateMessage
DispatchMessageW
GetWindowThreadProcessId
SetWindowTextW
ClientToScreen
OffsetRect
EnumChildWindows
GetClassNameW
CharLowerW
CharUpperW
MsgWaitForMultipleObjects
PostMessageW
SetNamedSecurityInfoW
DeleteAce
GetAce
GetNamedSecurityInfoW
ConvertSidToStringSidA
GetTokenInformation
OpenProcessToken
CryptDecrypt
CryptDestroyKey
CryptEncrypt
CryptGetKeyParam
CryptSetKeyParam
CryptImportKey
SetSecurityInfo
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
RegDeleteKeyW
RegQueryValueW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyW
RegSetValueW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
CoCreateInstance
OleInitialize
OleUninitialize
CoTaskMemFree
CLSIDFromString
SysStringLen
SysFreeString
VariantInit
VariantClear
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayPutElement
SysAllocStringByteLen
SysAllocString
SysStringByteLen
DllCanUnloadNow
DllGetClassObject
DllMProcedure
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ