DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
Static task
static1
Behavioral task
behavioral1
Sample
b3ca58276caee1895eec75481740f936_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b3ca58276caee1895eec75481740f936_JaffaCakes118
Size
158KB
MD5
b3ca58276caee1895eec75481740f936
SHA1
e58a29b1e6fa915e9ca47384417b8bd597a28c5f
SHA256
f46dad4a93860642a5d1bfe726db205ee58d5630cbe1567e3a57ae8df959de52
SHA512
32aa420d392af828b2ac0c03911ee7d31148c14d893e5a44bb763f753bc98d818911f34ef25a6f7721517a1e4e209f6a56cfa52e11197e6f9cfafdc2d887e763
SSDEEP
1536:wiwCeNr2XEzoevH6TonA4uaEDBJ/DwaFev3li58giOaEdqItjTF+k5N+qnl3GfMB:wXF6Tonp+8mevHgddtnF+k5N+q5Gubr
Checks for missing Authenticode signature.
resource |
---|
b3ca58276caee1895eec75481740f936_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrChrA
wnsprintfA
StrStrIA
InternetSetCookieA
InternetCrackUrlA
InitializeCriticalSection
RaiseException
LoadLibraryA
GetModuleFileNameA
DeleteCriticalSection
GetThreadLocale
SetThreadLocale
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
GetLastError
GetModuleHandleA
lstrcmpiA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
InterlockedDecrement
CloseHandle
OpenMutexA
GetProcessHeap
GetComputerNameA
GetVolumeInformationA
HeapAlloc
HeapFree
GetTickCount
GetCurrentProcessId
TerminateThread
Sleep
CreateMutexA
WaitForSingleObject
ReleaseMutex
CreateThread
CreateFileA
WriteFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InterlockedIncrement
FreeLibrary
FlushFileBuffers
LCMapStringW
GetStringTypeA
GetStringTypeW
lstrcpynA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
LCMapStringA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
VirtualFree
HeapReAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetCPInfo
GetACP
CharNextW
CharNextA
RegCreateKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
LoadRegTypeLi
VarUI4FromStr
VariantClear
VariantInit
SysAllocStringLen
UnRegisterTypeLi
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ