DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b161cde755b30578f2c098e53cacd045_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b161cde755b30578f2c098e53cacd045_JaffaCakes118
Size
268KB
MD5
b161cde755b30578f2c098e53cacd045
SHA1
926e3b21b70bf7932dc36d2b771f6d9d2c040b58
SHA256
a6ab0424649122c05771bba786eee04a3d4819f0e5aaac56dc7c20e02557213a
SHA512
2437a8bbac962aec17a19babba744e02c9c1b2b8861e90b5d69e34f186bd8cc2f5a9e55628e1a7ec78385c88ec93552b07d1ccc304d9f8c6a5d969893ed7ec01
SSDEEP
3072:U4h487GMFocNmeb7WYd7skhfzIqLytYlvpkLWuE0xMmAQLnS8cA3oUOVvGSDtBJi:1eyGTy7b7WYd7sk1utAXQJcAL6vf7sD
Checks for missing Authenticode signature.
resource |
---|
b161cde755b30578f2c098e53cacd045_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
CreateThread
SetEvent
WriteFile
SetFilePointer
CreateFileW
GetModuleFileNameW
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetLastError
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FormatMessageW
LoadLibraryExW
lstrcmpiW
DeleteCriticalSection
RaiseException
LeaveCriticalSection
EnterCriticalSection
GetSystemTime
GetTempFileNameW
CreateProcessW
WideCharToMultiByte
LoadLibraryA
lstrlenW
LocalAlloc
LocalFree
OpenEventW
WaitForSingleObject
ResetEvent
CloseHandle
GetTickCount
FindResourceW
GetWindowsDirectoryW
CreateFileA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetStringTypeA
FreeEnvironmentStringsW
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetEnvironmentStrings
GetStringTypeW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
HeapAlloc
HeapFree
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetStdHandle
GetModuleFileNameA
ExitProcess
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
VirtualFree
HeapDestroy
HeapCreate
HeapSize
FreeEnvironmentStringsA
MessageBoxW
CharNextW
UnregisterClassA
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
RegisterTypeLi
SysStringLen
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
VariantClear
VariantInit
SysAllocString
SysFreeString
UnRegisterTypeLi
StrToIntW
InternetConnectW
InternetOpenW
InternetCloseHandle
HttpSendRequestW
HttpAddRequestHeadersW
InternetReadFile
HttpOpenRequestW
HttpQueryInfoW
InternetAttemptConnect
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ