DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ab041c7c15a9f2b56681807dc17718bb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ab041c7c15a9f2b56681807dc17718bb_JaffaCakes118
Size
332KB
MD5
ab041c7c15a9f2b56681807dc17718bb
SHA1
2c40aeffb26bba8922909e3799a9303d23e699b4
SHA256
839c5b94030a93b12810e10bee330c7b3ac39ed96127fe2f7bd9fa472fcccf88
SHA512
b241671b7b328692fe232a5e1fa2870ff26cd72675ed38bee7911fd0211abce438ca924b84a1cd15702a08cb3dbd0e5dcf213e58ec7e724f717ffff6a442d474
SSDEEP
3072:fMZ3paBYjVRJA+5o8ZWLZpbLfosT2Ncev4wY82jA09x1fCySLf5t0MQQZDu:I3pTJ96bp4vZ2jA81fCye4MQQI
Checks for missing Authenticode signature.
resource |
---|
ab041c7c15a9f2b56681807dc17718bb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowThreadProcessId
UnregisterClassA
KillTimer
SetWindowLongA
SetTimer
AttachThreadInput
GetActiveWindow
GetFocus
GetSystemMetrics
ShowWindow
wsprintfA
SetForegroundWindow
SetActiveWindow
SetFocus
GetForegroundWindow
CallWindowProcA
CreateAcceleratorTableA
IsWindow
GetDesktopWindow
GetWindow
DestroyAcceleratorTable
BeginPaint
EndPaint
CharNextA
FillRect
ReleaseCapture
GetClassNameA
GetDlgItem
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
GetClientRect
SetWindowPos
MoveWindow
GetSysColor
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
DefWindowProcA
SendMessageA
DestroyWindow
CreateWindowExA
GetWindowLongA
SysStringLen
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
VariantInit
VariantClear
DispCallFunc
LoadRegTypeLi
SysAllocStringLen
SysStringByteLen
OleCreateFontIndirect
SysAllocStringByteLen
SysFreeString
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA
RegDeleteKeyA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
GetStartupInfoA
SetHandleCount
GetFileType
SetStdHandle
GetCurrentDirectoryA
GetFullPathNameA
GetConsoleMode
GetConsoleCP
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
ExitProcess
HeapCreate
HeapDestroy
GetCommandLineA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
RtlUnwind
VirtualQuery
GetSystemInfo
GetSystemTimeAsFileTime
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
HeapFree
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetTimeZoneInformation
SetEndOfFile
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
RaiseException
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
lstrcmpiA
VirtualProtect
LockResource
SizeofResource
GetCurrentThreadId
LoadResource
FindResourceA
GetProcessId
DisableThreadLibraryCalls
GetModuleFileNameA
GetCurrentProcessId
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
GetProcAddress
LoadLibraryA
FreeLibrary
LoadLibraryExA
GetModuleHandleA
SetThreadLocale
GetThreadLocale
CloseHandle
ReadFile
SetFilePointer
CreateFileA
Sleep
lstrcmpA
VirtualAlloc
IsBadReadPtr
VirtualFree
HeapAlloc
SetEnvironmentVariableA
CreateThread
WaitForSingleObject
GlobalUnlock
GlobalLock
GlobalAlloc
FlushInstructionCache
GetCurrentProcess
MulDiv
SetLastError
CreateProcessA
GetTempPathA
LocalFree
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
GetProcessHeap
InterlockedCompareExchange
GetVersionExA
GetLocaleInfoA
GetACP
InterlockedExchange
SelectObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDeviceCaps
CreateSolidBrush
GetObjectA
GetStockObject
DeleteObject
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleLockRunning
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoGetClassObject
CoInitialize
CoUninitialize
StrStrIA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ