DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a9dd3e4e413e8417a264514b98aabba6_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a9dd3e4e413e8417a264514b98aabba6_JaffaCakes118
Size
88KB
MD5
a9dd3e4e413e8417a264514b98aabba6
SHA1
c3df7f9b87018f5c4c2e7aeab1e963cc76aa6c23
SHA256
cd90928a6f7c0fe43cf0cb54135232c85e1bd300a5350331a0881f69117805a2
SHA512
ba1e2dc82e597699afdaca0ed237b462f410c1e910c2dd992a96422a0ca87f31964bffda88e2e92f23c4bf0cc84892bd63cffecefd077c1c670aafc35ae165eb
SSDEEP
1536:U+cJwHs0+ssVlK/WTgPaqCpXtJ/cr25kDKclWt7c3:lcKMf2ZBeqekDKcct7c3
Checks for missing Authenticode signature.
resource |
---|
a9dd3e4e413e8417a264514b98aabba6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
GetTickCount
lstrlenW
WideCharToMultiByte
Sleep
ExpandEnvironmentStringsA
SetFileAttributesA
DeleteFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
CloseHandle
CreateThread
ResumeThread
ReadFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
LoadLibraryA
FlushFileBuffers
SetStdHandle
GetProcAddress
lstrlenA
SetEndOfFile
SetFilePointer
CreateFileA
GetModuleHandleA
GetLastError
WriteFile
MultiByteToWideChar
GetVersionExA
DeviceIoControl
SetPriorityClass
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
RtlUnwind
HeapFree
ExitProcess
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
DispatchMessageA
GetActiveWindow
wsprintfA
GetWindowRect
MoveWindow
PeekMessageA
IsCharAlphaNumericA
SystemParametersInfoA
SysFreeString
VariantChangeType
VariantCopy
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
ord18
ord15
ord16
ord21
ord57
ord10
ord11
ord31
ord32
ord58
ord30
ord23
SHSetValueA
StrTrimA
SHGetValueA
CoUninitialize
CoInitialize
CoCreateInstance
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile
InternetOpenA
InternetConnectA
HttpSendRequestA
InternetCloseHandle
GetAdaptersInfo
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ