DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c8ce4a2e5caa0a15817851a3531b17f5_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c8ce4a2e5caa0a15817851a3531b17f5_JaffaCakes118
Size
669KB
MD5
c8ce4a2e5caa0a15817851a3531b17f5
SHA1
9859b5c95db95bf41eec1cd749e9af6b92169330
SHA256
359f7dc49c0fcc2f4ea30d4d32b878e635167fcd4557e561ee243480e7879e40
SHA512
272a1077f16f6b4658739d201a9ecff59eb8beaa6c051b86eef61f5d4ea005665abade4c93e3d4ca4566f3383cde55d0844f8f1bebb993076ac2e316b74d742d
SSDEEP
12288:PWfUFmdE6XXLOV84ki3x8R2KrL9BKZ3J/jm/0XyYXr1ZqvNlVAMT6bh0to9xP0/0:u8gpnKVxki3xg2KrzKZ3J8T4BfpaV2
Checks for missing Authenticode signature.
resource |
---|
c8ce4a2e5caa0a15817851a3531b17f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UrlUnescapeW
UrlGetPartW
UrlEscapeW
StrStrIW
PathIsDirectoryW
PathMatchSpecW
PathFileExistsW
StrCmpIW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryA
SetLastError
GetDriveTypeA
GetProcessHeap
SetEndOfFile
CreateFileA
GetModuleHandleA
GetTimeZoneInformation
CreateFileW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
InterlockedDecrement
GetUserDefaultLCID
GetCurrentDirectoryA
SetFilePointer
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetOEMCP
GetACP
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFullPathNameW
Sleep
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetSystemInfo
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
GetSystemTime
InterlockedExchange
ReadFile
InterlockedIncrement
CompareStringA
CompareStringW
GetLocaleInfoA
GetLastError
HeapReAlloc
VirtualAlloc
WriteFile
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
SetEnvironmentVariableA
HeapFree
GetSystemTimeAsFileTime
ExitThread
CreateThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
EnumChildWindows
wsprintfW
RealGetWindowClassW
GetWindowTextW
SendMessageW
SetWindowLongW
CallWindowProcW
SetWindowPos
SetWindowTextW
GetWindowLongW
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoCreateGuid
CoTaskMemFree
CoInitialize
VarBstrCmp
VariantClear
VariantChangeType
VariantCopy
SysStringLen
SysAllocString
VariantInit
SysFreeString
inet_addr
UuidToStringW
RpcStringFreeW
ImpersonateSelf
LookupPrivilegeValueW
OpenThreadToken
AdjustTokenPrivileges
SHCreateDirectoryExW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ