DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c1777a649c8274b5742f1a697993c125_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c1777a649c8274b5742f1a697993c125_JaffaCakes118
Size
156KB
MD5
c1777a649c8274b5742f1a697993c125
SHA1
0b8fcd1cf841cddf383f4d2ebc2518e5ee30c032
SHA256
5c7d4c2f2aaff3767656512a1fbc2023322d410fe3407dbeb3a5a42c2b8a3f93
SHA512
77e8ee7a3208f7614d72b9596686a321303a8d87fdb4b2cca496dae0bf1567b3a6908a3c987120fb8a5e2e959be598864153738dfdef3f58bdc980868c9c98b5
SSDEEP
3072:H9tL+cqWvDcN8Klx6eIA7UnXf6y6ttBlGC6:ZqwsKUuXfjyBl
Checks for missing Authenticode signature.
resource |
---|
c1777a649c8274b5742f1a697993c125_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetGetConnectedState
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
HttpAddRequestHeadersA
InternetCloseHandle
URLDownloadToFileA
VirtualProtect
GetLastError
VirtualQuery
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrlenA
lstrcpyA
GetTickCount
GetLocalTime
GetVersion
WideCharToMultiByte
lstrcpyW
lstrlenW
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
MoveFileExA
CopyFileA
MoveFileA
ReadFile
GetFileSize
DeleteFileA
Sleep
_lclose
_lread
MultiByteToWideChar
lstrcmpA
lstrcpynA
lstrcpynW
lstrcatW
lstrcmpW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiA
CreateThread
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
HeapSize
_lopen
GetStdHandle
ExitProcess
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentProcessId
QueryPerformanceCounter
HeapCreate
HeapDestroy
VirtualFree
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
VirtualAlloc
GetSystemInfo
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
GetCPInfo
GetOEMCP
CharNextA
CharLowerA
wsprintfA
CharUpperW
CharUpperA
UnregisterClassA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCloseKey
SHGetSpecialFolderPathA
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ