DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
Static task
static1
Behavioral task
behavioral1
Sample
c057f2e6521c320f076bcbf2d8654c0c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c057f2e6521c320f076bcbf2d8654c0c_JaffaCakes118
Size
158KB
MD5
c057f2e6521c320f076bcbf2d8654c0c
SHA1
ba4871c0552fec059911f213400742936228417a
SHA256
45e76a2bf51352377b679607487d2b66b6a4867c981fbb812d17aa5ae93f64a7
SHA512
58bb90a2406e0ecd11300eb8da7cacfd0ed2f14cb08c1ab8a525648e7c268312cd7adb43d17669c9b3f3fa45f7460f9d5b70137dcdb42dae6436b5c0fa58b9c9
SSDEEP
1536:wiwCeNr2XEzoevH6TonA4uaEDBJ/DwaFev3li58giOaEdqItjnF+k5N+qnl3GfMB:wXF6Tonp+8mevHgddtDF+k5N+q5Gubr
Checks for missing Authenticode signature.
resource |
---|
c057f2e6521c320f076bcbf2d8654c0c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrChrA
wnsprintfA
StrStrIA
InternetSetCookieA
InternetCrackUrlA
InitializeCriticalSection
RaiseException
LoadLibraryA
GetModuleFileNameA
DeleteCriticalSection
GetThreadLocale
SetThreadLocale
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
GetLastError
GetModuleHandleA
lstrcmpiA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
InterlockedDecrement
CloseHandle
OpenMutexA
GetProcessHeap
GetComputerNameA
GetVolumeInformationA
HeapAlloc
HeapFree
GetTickCount
GetCurrentProcessId
TerminateThread
Sleep
CreateMutexA
WaitForSingleObject
ReleaseMutex
CreateThread
CreateFileA
WriteFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InterlockedIncrement
FreeLibrary
FlushFileBuffers
LCMapStringW
GetStringTypeA
GetStringTypeW
lstrcpynA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
LCMapStringA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
VirtualFree
HeapReAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetCPInfo
GetACP
CharNextW
CharNextA
RegCreateKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
LoadRegTypeLi
VarUI4FromStr
VariantClear
VariantInit
SysAllocStringLen
UnRegisterTypeLi
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ