DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DummyMethod
DummyMethod1
DummyMethod2
DummyMethod3
DummyMethod4
DummyMethod5
GetClientLocid
GetClientTicket
Static task
static1
Behavioral task
behavioral1
Sample
a5991ce1773402ef75be80609bf73223_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a5991ce1773402ef75be80609bf73223_JaffaCakes118
Size
137KB
MD5
a5991ce1773402ef75be80609bf73223
SHA1
2193770f042966103577b5ba3b13e68c7ab2f4af
SHA256
99e491fd486caabd844b07932da1f608a8d785efab431ab4d2384c75bc5f9f02
SHA512
010a4ff1865c54cdd51629a6c334c2dc40ec44f41ec2cfca3cbb95bbe4ccb9c3a045d63134bade57ecad269313ed9973f8dadd6b3a8e2ce7962e51ff7f7e6f01
SSDEEP
3072:LR5LpFrzqxwfeb4rbdCstpBFK41f54GAxrBw:LLrWUXnKE6S
Checks for missing Authenticode signature.
resource |
---|
a5991ce1773402ef75be80609bf73223_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HttpSendRequestA
InternetGetConnectedState
HttpOpenRequestA
HttpQueryInfoA
InternetSetCookieA
InternetCrackUrlA
wnsprintfA
StrStrIA
PathFileExistsA
GetVersionExA
lstrlenA
GetModuleHandleW
WideCharToMultiByte
LeaveCriticalSection
MultiByteToWideChar
lstrlenW
SetThreadLocale
GetThreadLocale
GetProcAddress
EnterCriticalSection
FindResourceA
FreeLibrary
LoadResource
SizeofResource
IsDBCSLeadByte
lstrcmpiA
LoadLibraryExA
HeapReAlloc
CreateFileA
HeapAlloc
DeleteCriticalSection
HeapFree
WaitForSingleObject
GetProcessHeap
WriteFile
TerminateThread
Sleep
CreateProcessA
LoadLibraryA
CreateMutexA
CloseHandle
GetTempPathA
LocalFree
CreateThread
GetVolumeInformationA
GetSystemTimeAsFileTime
GetStringTypeW
GetModuleHandleA
GetModuleFileNameA
GetLastError
RaiseException
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
GetCurrentProcess
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleA
CharNextW
CharNextA
RegCreateKeyA
RegQueryValueExA
GetLengthSid
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
OpenProcessToken
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyExA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteKeyA
RegOpenKeyA
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
LoadRegTypeLi
VarUI4FromStr
SysAllocStringLen
VariantInit
VariantClear
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DummyMethod
DummyMethod1
DummyMethod2
DummyMethod3
DummyMethod4
DummyMethod5
GetClientLocid
GetClientTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ