DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c28cfa4c8d4dd6331427953646444d02_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c28cfa4c8d4dd6331427953646444d02_JaffaCakes118
Size
24KB
MD5
c28cfa4c8d4dd6331427953646444d02
SHA1
4c58e42119fe9a5ec0f6aad8cb6b7405db73b126
SHA256
19f8405318e8bbb7e023eae392f6288aed034ab17007bf114b32d62deb667bb6
SHA512
c31c25663ce0aa6dfbb0c23a05bb04397f324a0b0d42dafef1df606ff99fcf82de8c874366d6ee40cf84cb6f4ea40dc87f595d003557d7adaa7c8c93b8b95206
SSDEEP
384:herLI2nLHyfM/SiyXqoyOeBGVKqvifgHSUerVyV5pNEiTleZ:hefLHyfM7vNOICvSUerErpN/Tl
Checks for missing Authenticode signature.
resource |
---|
c28cfa4c8d4dd6331427953646444d02_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionExA
SetEvent
CloseHandle
WaitForSingleObject
ExitThread
GetTickCount
lstrlenW
GetModuleHandleA
lstrcpyW
lstrcatW
HeapFree
lstrlenA
IsBadStringPtrA
lstrcmpA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
GetSystemDirectoryW
lstrcpyA
HeapAlloc
HeapReAlloc
CompareStringW
Sleep
lstrcatA
GetSystemDirectoryA
SetFilePointer
CreateFileA
ReleaseMutex
SetEndOfFile
CreateEventA
CreateMutexA
CreateThread
ReadFile
WriteFile
WriteProcessMemory
GetCurrentProcess
VirtualProtect
lstrcmpiA
GetProcessHeap
CharLowerA
wsprintfW
CharUpperW
wsprintfA
CryptDecrypt
InitializeSecurityDescriptor
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CryptEncrypt
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
SetSecurityDescriptorDacl
StringFromIID
CoGetMalloc
SysFreeString
SysAllocString
InternetConnectA
InternetCrackUrlW
InternetCrackUrlA
CoInternetCombineUrl
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ