DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d21519c18f0b31821ee6586c6bbf3788_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d21519c18f0b31821ee6586c6bbf3788_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d21519c18f0b31821ee6586c6bbf3788_JaffaCakes118
Size
120KB
MD5
d21519c18f0b31821ee6586c6bbf3788
SHA1
1e80cb1bfe28528fdc272fc267483b9c70f30a95
SHA256
23ea69be751871ff0375177b8fb80c45d703f91a925708ae8f24a16584d1304a
SHA512
59e6271f1e9a40eb9e54758bae097674c9ce6e4f553fa28dd7c5e7c3bb06dfb952c5d74d4c6815b90989be7bd7031b709af91c418986e97bbb41ad0149e64b87
SSDEEP
3072:3BtebCdwFZaq3TcxapnMDFTkHKamVc9R+:3BOd2pTFtVB
Checks for missing Authenticode signature.
resource |
---|
d21519c18f0b31821ee6586c6bbf3788_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
recv
select
WSAGetLastError
connect
ioctlsocket
setsockopt
htons
socket
send
shutdown
closesocket
WSAStartup
WSACleanup
gethostbyname
URLDownloadToFileA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
RaiseException
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
TerminateThread
FindClose
FindFirstFileA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
WinExec
CreateDirectoryA
GetWindowsDirectoryA
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
lstrcmpA
WideCharToMultiByte
lstrlenA
GetLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
TerminateProcess
WaitForSingleObject
CreateProcessA
FlushFileBuffers
WriteFile
GetTempFileNameA
GetTempPathA
ReadFile
GetFileSize
DebugBreak
DeleteFileA
GetLastError
GetVolumeInformationA
IsDebuggerPresent
RemoveDirectoryA
FindNextFileA
CreateThread
GetModuleFileNameA
DeviceIoControl
SetPriorityClass
GetCurrentProcess
MultiByteToWideChar
lstrlenW
EnterCriticalSection
LeaveCriticalSection
lstrcmpiA
InterlockedIncrement
InterlockedDecrement
lstrcpynA
lstrcpyA
lstrcatA
DisableThreadLibraryCalls
IsDBCSLeadByte
FreeLibrary
HeapDestroy
GetModuleHandleA
GetPrivateProfileStringA
HeapAlloc
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
CreateFileA
LoadLibraryExA
MessageBoxA
CharLowerA
wvsprintfA
CharNextA
wsprintfA
CharUpperA
KillTimer
SetTimer
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
VarUI4FromStr
SysAllocStringLen
VarBstrCat
SysStringLen
LoadRegTypeLi
SysFreeString
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ