DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b2b910809e1bddd88407f3ecb5e58a5e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b2b910809e1bddd88407f3ecb5e58a5e_JaffaCakes118
Size
49KB
MD5
b2b910809e1bddd88407f3ecb5e58a5e
SHA1
b5abcbf62fef039bf93395d7e4687120d5211eb3
SHA256
a5d832e86570145557e81d646bfbd37984c7040d3d45fe51dd5587cafb001438
SHA512
05536d5c76067b5502fbf7b19820ddf7352813d59e57032cb2319df0e7450020ca0499dd7e23488266c06e869cc97f3d29f356719928dac10eb1aa5255c0f0cd
SSDEEP
768:R9UOsS1nwGNvipOmgatoZPJB3mob2fCUJ+rK2sgd4jb:RzN4LgYoVJxmob2Khsnjb
Checks for missing Authenticode signature.
resource |
---|
b2b910809e1bddd88407f3ecb5e58a5e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
SetEvent
WaitForSingleObject
GetSystemDirectoryW
ExitThread
GetTickCount
lstrlenW
GetModuleHandleA
lstrcpyW
lstrcatW
GetProcessHeap
HeapFree
IsBadStringPtrA
lstrcmpA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
GetComputerNameA
GetVersionExA
GetFileAttributesA
lstrcpyA
HeapAlloc
HeapReAlloc
lstrlenA
CompareStringW
Sleep
lstrcatA
GetSystemDirectoryA
SetFilePointer
CreateFileA
ReleaseMutex
SetEndOfFile
CreateEventA
CreateMutexW
CreateThread
ReadFile
WriteFile
WriteProcessMemory
GetCurrentProcess
VirtualProtect
lstrcmpiA
wsprintfA
CharUpperW
CharLowerA
wsprintfW
InitializeSecurityDescriptor
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptEncrypt
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptDecrypt
CoGetMalloc
StringFromIID
SysAllocString
SysFreeString
InternetCrackUrlW
InternetCrackUrlA
InternetConnectA
CoInternetCombineUrl
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ