DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
Static task
static1
Behavioral task
behavioral1
Sample
addca5bf56d753fa731b420f38d163ac_JaffaCakes118.dll
Resource
win7-20240708-en
Target
addca5bf56d753fa731b420f38d163ac_JaffaCakes118
Size
158KB
MD5
addca5bf56d753fa731b420f38d163ac
SHA1
9197e14ab4890df9c4c9743d1cfa9076afb71bcc
SHA256
c5fd50e1dacee70fabb8e2843778e177293c70e1f9ebd568d31459aea14d0eb2
SHA512
ab012d053e1457d69290416d5ead7aaf884f52843b962c783acb22e5f5a562b14197c0c46343190835677dea4c1a649c7bf261f1cf791cad30276801c06b0e1a
SSDEEP
1536:wiwCeNr2XEzoevH6TonA4uaEDBJ/DwaFev3li58giOaEdqItjtF+k5N+qnl3GfMB:wXF6Tonp+8mevHgddtxF+k5N+q5Gubr
Checks for missing Authenticode signature.
resource |
---|
addca5bf56d753fa731b420f38d163ac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrChrA
wnsprintfA
StrStrIA
InternetSetCookieA
InternetCrackUrlA
InitializeCriticalSection
RaiseException
LoadLibraryA
GetModuleFileNameA
DeleteCriticalSection
GetThreadLocale
SetThreadLocale
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
GetLastError
GetModuleHandleA
lstrcmpiA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
InterlockedDecrement
CloseHandle
OpenMutexA
GetProcessHeap
GetComputerNameA
GetVolumeInformationA
HeapAlloc
HeapFree
GetTickCount
GetCurrentProcessId
TerminateThread
Sleep
CreateMutexA
WaitForSingleObject
ReleaseMutex
CreateThread
CreateFileA
WriteFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InterlockedIncrement
FreeLibrary
FlushFileBuffers
LCMapStringW
GetStringTypeA
GetStringTypeW
lstrcpynA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
LCMapStringA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
VirtualFree
HeapReAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetCPInfo
GetACP
CharNextW
CharNextA
RegCreateKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
LoadRegTypeLi
VarUI4FromStr
VariantClear
VariantInit
SysAllocStringLen
UnRegisterTypeLi
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ