DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
beb648282b9325d0bede540f064bdb7d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
beb648282b9325d0bede540f064bdb7d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
beb648282b9325d0bede540f064bdb7d_JaffaCakes118
Size
236KB
MD5
beb648282b9325d0bede540f064bdb7d
SHA1
e3a73d85bdba93094b91184e009f0629507a7a03
SHA256
b6b478adccacbe96c2ab19b22dbae4111f2d01ae0443d4e7bba1685ead861060
SHA512
1140874014beda8d729271386faf5ab25366ce3021f346d614891925605798bc7463d002904ffe9f8f71f4aa786778ca65b4d3152f90bf7d15cedd1b7117f17d
SSDEEP
3072:f6xBHM2Aa6aVjsiSN3kJ7jX/ugvmofuTggDnBS0:f6LMba6aPSN3M76QVuTggDn
Checks for missing Authenticode signature.
resource |
---|
beb648282b9325d0bede540f064bdb7d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
FreeLibrary
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
CloseHandle
WriteFile
CreateFileA
FindClose
FindFirstFileA
SetFileTime
GetFileTime
LocalFree
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
lstrlenA
GetVersionExA
MultiByteToWideChar
GetLastError
lstrlenW
WideCharToMultiByte
GetModuleFileNameA
SetStdHandle
GetStringTypeW
GetStringTypeA
VirtualAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
ReadFile
SetFilePointer
GetModuleHandleA
GetShortPathNameA
GetPrivateProfileIntA
CopyFileA
DeleteFileA
GetTickCount
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
GlobalUnlock
GetPrivateProfileStringA
WritePrivateProfileStringA
GlobalLock
GetPrivateProfileSectionA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
HeapSize
HeapReAlloc
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetFileAttributesA
GetCommandLineA
GetVersion
RaiseException
TlsAlloc
TlsFree
SetLastError
HeapFree
HeapAlloc
GetClassNameA
IsWindow
EnumChildWindows
GetWindow
SetWindowTextA
GetWindowTextA
wsprintfA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
ShellExecuteA
ReleaseStgMedium
CoCreateInstance
RegisterDragDrop
RevokeDragDrop
OleInitialize
CoGetClassObject
CoUninitialize
CoInitialize
CoCreateGuid
CreateStreamOnHGlobal
VariantInit
VariantClear
SysAllocString
SysFreeString
VariantChangeType
VariantCopy
SysAllocStringLen
SysStringLen
LoadRegTypeLi
CreateUrlCacheEntryA
InternetReadFile
InternetQueryDataAvailable
InternetOpenA
HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
ord20
ord21
ord17
ord31
ord30
ord16
ord15
ord57
ord32
ord58
ord23
ord18
WSAStartup
socket
gethostbyname
inet_ntoa
recvfrom
WSAGetLastError
htons
sendto
ioctlsocket
CoInternetGetSession
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ