DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a01c64dae7a54dda10f06493b8ace7a2_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a01c64dae7a54dda10f06493b8ace7a2_JaffaCakes118
Size
35KB
MD5
a01c64dae7a54dda10f06493b8ace7a2
SHA1
7dc09cb0822818c3a6c0f867adc3deb803dad0a0
SHA256
f57a1d2c2e846c4fb2b0dc031a8df6c597e54d15aaaae48e7ea55d19c629a92f
SHA512
5f145332ca8ed3260e2168610cb654fe59c7496cf8ca32b85bdd5dd1201c2a8d711e23e07e67fe6aeb150914758c33d4f3d34e1bc594ad48c5a6266c59c09e2d
SSDEEP
768:v8d5QaxAB9QvswnoFP8SHcumoPNr+LsuouTK:v8duaiB9QvDa8op+LsuxTK
Checks for missing Authenticode signature.
resource |
---|
a01c64dae7a54dda10f06493b8ace7a2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSAStartup
gethostbyname
htonl
InternetCrackUrlA
MessageBoxA
RtlUnwind
InterlockedIncrement
InterlockedDecrement
FindClose
FindFirstFileA
WritePrivateProfileStringA
GetShortPathNameA
MoveFileExA
GetVersion
GetTickCount
MoveFileA
DeleteFileA
SetFileAttributesA
CopyFileA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetSystemDirectoryA
GetWindowsDirectoryA
InterlockedExchange
GetTempPathA
GetModuleFileNameA
DisableThreadLibraryCalls
WideCharToMultiByte
AreFileApisANSI
VirtualQuery
GetProcessHeap
HeapFree
HeapReAlloc
GetSystemTimeAsFileTime
ReadFile
WriteFile
IsBadStringPtrA
IsBadReadPtr
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
VirtualProtect
IsBadWritePtr
GetCurrentProcessId
DeleteCriticalSection
SetLastError
GetLastError
InitializeCriticalSection
ExpandEnvironmentStringsA
HeapAlloc
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
UuidFromStringA
UuidCreate
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ