DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientLocid
GetClientTicket
Static task
static1
Behavioral task
behavioral1
Sample
cebfb4d9a4a67c3f572e60a059450425_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cebfb4d9a4a67c3f572e60a059450425_JaffaCakes118
Size
137KB
MD5
cebfb4d9a4a67c3f572e60a059450425
SHA1
52eda74d043ddf9036b7ede99d0e2cedbe5b681f
SHA256
1ab0cb14830f6ca4881ff5992085db7b82d4628327d0c7fdc72692636b23e81e
SHA512
9a45ab6b6b5bd13d7cfe617e353142720856e8454b4409a61506d99f34af1940e97376c92ffdae439324e1377717ca8fe86ecbfbd2336e9fb0319962e12b5bdc
SSDEEP
3072:hVXyIcP7SqPEFNA9+sj9/hxHRpM5wpAxrBH9b:ml+sj3t71Od
Checks for missing Authenticode signature.
resource |
---|
cebfb4d9a4a67c3f572e60a059450425_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetGetConnectedState
HttpQueryInfoA
InternetSetCookieA
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestA
PathFileExistsA
StrStrIA
wnsprintfA
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetProcAddress
lstrlenA
lstrlenW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
lstrcmpiA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
HeapReAlloc
HeapAlloc
LoadLibraryA
TerminateThread
HeapFree
InterlockedDecrement
LocalFree
CloseHandle
GetCurrentProcess
CreateProcessA
WriteFile
CreateFileA
GetTempPathA
lstrcmpA
SleepEx
ReleaseMutex
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
GetVolumeInformationA
GetSystemTimeAsFileTime
SetFilePointer
InterlockedIncrement
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetProcessHeap
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
CharNextA
CharNextW
GetLengthSid
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
OpenProcessToken
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
LoadRegTypeLi
VarUI4FromStr
SysAllocStringLen
VariantClear
VariantInit
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientLocid
GetClientTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ