DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a49349486b69d3f485ba610f79912d46_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a49349486b69d3f485ba610f79912d46_JaffaCakes118
Size
108KB
MD5
a49349486b69d3f485ba610f79912d46
SHA1
48d436e63beae4b99e3d6df704c329c6d3a2f5f7
SHA256
0abf74b900ad4de473901ce7f16f88c81c65c3036b740616779d37f43676a9e2
SHA512
9beec357c195ab28de34b4ebd456dd75db94457bd8041ee8d2d6da4a1c978af9946d001571c122d3a01a92a2597f462759e7d9391798d8fd50de88e528344d71
SSDEEP
3072:cuwrR34Qzt+C+ddYrRdvSy957WeEHJ6slHHJ0MOfTur:twrR34Qzt+CjR5SyUlHku
Checks for missing Authenticode signature.
resource |
---|
a49349486b69d3f485ba610f79912d46_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GlobalFree
GlobalAlloc
GetProcAddress
LoadLibraryA
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
FlushInstructionCache
GetCurrentProcess
lstrlenW
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
lstrcatA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetEnvironmentVariableA
CompareStringW
CompareStringA
ReadFile
SetStdHandle
IsBadCodePtr
CreateFileA
WriteFile
lstrlenA
CloseHandle
GetFileAttributesA
GetVersionExA
GetConsoleCP
OutputDebugStringA
DebugBreak
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
HeapDestroy
SetFilePointer
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
HeapSize
TerminateProcess
ExitProcess
RaiseException
GetVersion
GetCommandLineA
GetTimeZoneInformation
GetLocalTime
HeapReAlloc
HeapAlloc
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
LCMapStringW
LCMapStringA
RtlUnwind
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
GetStringTypeW
LocalFree
HeapFree
GetStringTypeA
DestroyWindow
CharNextA
wsprintfA
SendMessageA
GetDlgItem
SetWindowLongA
CallWindowProcA
CreateWindowExA
RegisterClassExA
LoadCursorA
GetClassInfoExA
LoadStringA
DefWindowProcA
GetWindowLongA
FindWindowExA
wvsprintfA
IsWindow
SetTimer
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
SHGetSpecialFolderPathA
CoTaskMemRealloc
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
SysStringLen
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VarUI4FromStr
VariantCopy
VariantChangeType
VariantClear
SysAllocString
SysFreeString
HttpSendRequestA
InternetReadFile
InternetConnectA
InternetOpenA
InternetCloseHandle
HttpOpenRequestA
InternetQueryDataAvailable
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
WSAStartup
gethostbyname
WSACleanup
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ