DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gettextadvert
Static task
static1
Behavioral task
behavioral1
Sample
b3c5d4642dee747dac6e82a7b85bdcf3_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b3c5d4642dee747dac6e82a7b85bdcf3_JaffaCakes118
Size
477KB
MD5
b3c5d4642dee747dac6e82a7b85bdcf3
SHA1
30ea68bc0257d4e79b5d185964cc0432cf665c64
SHA256
13c5e3fc5374fdd922fefc7b76ffee2247b7d5129c008902ccef57ac3a91c2e9
SHA512
0f874f4154b540aae49627c95b3129c055292b599ef5b10aa8ed0cc8d46fbf52fa5851c0c47b384b99870d504f4b29a84ca70426620f6a7c7709447c21d6b962
SSDEEP
12288:2erVjpvBmIWWq9Tt3l2Nutg/cnmQPVKFgKFbvivN1Fb5ZS/HWwNxaj50qr9SeETa:VrVjpv4IYKD
Checks for missing Authenticode signature.
resource |
---|
b3c5d4642dee747dac6e82a7b85bdcf3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
MultiByteToWideChar
lstrlenA
CloseHandle
WriteFile
CreateFileW
FreeLibrary
LoadLibraryExW
RaiseException
lstrcmpiW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
SetThreadLocale
GetThreadLocale
CreateThread
GetVersionExW
DeleteFileW
GetProcAddress
LoadLibraryW
FlushFileBuffers
GetTickCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleHandleW
GetLastError
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
InterlockedExchange
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
Sleep
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
CharLowerA
CharNextW
wsprintfW
UnregisterClassA
IsTextUnicode
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
SHGetFolderPathW
CoTaskMemFree
CoGetClassObject
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
VarBstrCat
SysAllocStringLen
SysFreeString
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
VarBstrCmp
LoadRegTypeLi
NdrStubForwardingFunction
NdrOleFree
NdrOleAllocate
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
InternetSetCookieW
InternetCrackUrlW
InternetGetCookieW
CoInternetGetSession
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gettextadvert
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ