DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b672746b234d8d1f11f9afcc018b487b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b672746b234d8d1f11f9afcc018b487b_JaffaCakes118
Size
124KB
MD5
b672746b234d8d1f11f9afcc018b487b
SHA1
973b7566b1cd057a2c1c26e0f6602a9d3485bed5
SHA256
006d60f0b42bac67f748b25b85a48b399ce2b174ced21634ee2d4c6293ca5868
SHA512
10e43e636723a697b741d30ed6c826135c2dfaea106892f757a4acf7db2dde5fa4418348bfff03bdc855bef44d4fb98c7917f9a2d1dc734f1f1d0fb5355ee667
SSDEEP
1536:ZdiGJVY0NSk4lTy9ibUhl3kvNCGh0nJUl9zymZkS9Rrq7BE0Bs62:ZZVY0Nz4lTy7lsNheJUl9zyZwABE0d2
Checks for missing Authenticode signature.
resource |
---|
b672746b234d8d1f11f9afcc018b487b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindResourceW
GetLastError
LoadLibraryExW
lstrcmpiW
lstrcpynW
HeapDestroy
GetProcAddress
LoadLibraryW
lstrcpyW
lstrcatW
CreateFileA
GetTempPathA
FlushFileBuffers
WriteFile
DeleteFileA
DeviceIoControl
WideCharToMultiByte
GetCurrentProcessId
GetModuleHandleA
WriteProcessMemory
LoadResource
VirtualProtect
DebugBreak
SetErrorMode
Sleep
OpenEventA
ExitProcess
OutputDebugStringA
LoadLibraryA
GetWindowsDirectoryA
CreateThread
SetUnhandledExceptionFilter
RaiseException
LocalFree
SetStdHandle
GetOEMCP
GetACP
SizeofResource
lstrlenA
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetShortPathNameW
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
CloseHandle
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCurrentProcess
GetCPInfo
GetStringTypeW
GetStringTypeA
SetFilePointer
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetStdHandle
LCMapStringW
LCMapStringA
HeapSize
TerminateProcess
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetVersion
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
IsBadCodePtr
SetWindowLongW
wsprintfA
CharLowerW
MessageBoxW
CharNextW
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
VarUI4FromStr
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
SysStringLen
SysAllocStringLen
VariantClear
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ