DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientLocid
GetClientTicket
Static task
static1
Behavioral task
behavioral1
Sample
c7974187d222b04864dfe44591ef17db_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c7974187d222b04864dfe44591ef17db_JaffaCakes118
Size
137KB
MD5
c7974187d222b04864dfe44591ef17db
SHA1
a932077dff8b1a8d35506909d50ce9d6682a0422
SHA256
e408bc2a0027af3d92fc178ba4b583a05dbe7b8844d2e938cf9fa996edec8242
SHA512
22daf4f0cf9315a2cb4ff8dc0e03e0bfbae7adfe56e15aa96581860a621c0c6c9803654c907501fe5b4777d58f75991938415de3d630c315dd31287bea963394
SSDEEP
3072:hVXyIcP7SqPEFNA9+sj4/hxHRpM5wpAxrBH9b:ml+sjWt71Od
Checks for missing Authenticode signature.
resource |
---|
c7974187d222b04864dfe44591ef17db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetGetConnectedState
HttpQueryInfoA
InternetSetCookieA
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestA
PathFileExistsA
StrStrIA
wnsprintfA
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetProcAddress
lstrlenA
lstrlenW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
lstrcmpiA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
HeapReAlloc
HeapAlloc
LoadLibraryA
TerminateThread
HeapFree
InterlockedDecrement
LocalFree
CloseHandle
GetCurrentProcess
CreateProcessA
WriteFile
CreateFileA
GetTempPathA
lstrcmpA
SleepEx
ReleaseMutex
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
GetVolumeInformationA
GetSystemTimeAsFileTime
SetFilePointer
InterlockedIncrement
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetProcessHeap
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
CharNextA
CharNextW
GetLengthSid
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
OpenProcessToken
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
LoadRegTypeLi
VarUI4FromStr
SysAllocStringLen
VariantClear
VariantInit
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientLocid
GetClientTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ