DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c1db148979c81811f37bbc7629b852e7_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c1db148979c81811f37bbc7629b852e7_JaffaCakes118
Size
284KB
MD5
c1db148979c81811f37bbc7629b852e7
SHA1
eb2d6b77bc59cbaf7b93dd594fc66f1c717f1d2d
SHA256
845da9d3b0b3df7e9c2709487af23d1fbb5abdceba5663605718bf700168fe86
SHA512
d2433263835844f5970ca2c84255d4d1059eb0c8d194e0fd498fce25144865b2702a79cc20b1436b6d90ffdbf54c45ddcf0f9ac200d627636f605493d389da31
SSDEEP
3072:xfYkGeMnf1HSv10BXkROKelNrLjgfmVb8+Zh79lByKlwxQDbgzmaI7FOV/tiBL6y:xw/JYU4OL7gf8oDqDEqsQF3
Checks for missing Authenticode signature.
resource |
---|
c1db148979c81811f37bbc7629b852e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
Sleep
SetEvent
CreateFileW
SetFilePointer
WriteFile
InterlockedIncrement
InterlockedDecrement
FreeLibrary
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
DisableThreadLibraryCalls
CloseHandle
RaiseException
GetLastError
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetSystemTime
GetTempFileNameW
CreateProcessW
WideCharToMultiByte
LoadLibraryA
CreateFileA
ResetEvent
WaitForSingleObject
OpenEventW
GetWindowsDirectoryW
GetTickCount
LocalAlloc
lstrlenW
FormatMessageW
GetModuleFileNameW
LocalFree
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetStringTypeA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
FreeEnvironmentStringsA
GetStringTypeW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
MessageBoxW
CharNextW
UnregisterClassA
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysFreeString
SysAllocString
LoadRegTypeLi
StrToIntW
InternetConnectW
InternetAttemptConnect
InternetCloseHandle
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetReadFile
HttpQueryInfoW
InternetOpenW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ