DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientLocid
GetClientTicket
Static task
static1
Behavioral task
behavioral1
Sample
d56f261c3faecf6443b3e050c88cdee6_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d56f261c3faecf6443b3e050c88cdee6_JaffaCakes118
Size
137KB
MD5
d56f261c3faecf6443b3e050c88cdee6
SHA1
2184678e36decb7f8c687be0aaabfe739000a0ed
SHA256
bd0944ee5c1a0aa839cdbdd2a820e23af71b5e61289de2b6550237a07418f072
SHA512
6218440e1f7eacac04d720bd2299a80ebb1270c1c9c656ff81e2b944b860528000b1cc78f4a1c2560dcfa3cc99fccd0c133a59949bde6ce135f9674641b25af3
SSDEEP
3072:hVXyIcP7SqPEFNA9+sjl/hxHRpM5wpAxrBH9b:ml+sjPt71Od
Checks for missing Authenticode signature.
resource |
---|
d56f261c3faecf6443b3e050c88cdee6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetGetConnectedState
HttpQueryInfoA
InternetSetCookieA
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestA
PathFileExistsA
StrStrIA
wnsprintfA
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetProcAddress
lstrlenA
lstrlenW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
lstrcmpiA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
HeapReAlloc
HeapAlloc
LoadLibraryA
TerminateThread
HeapFree
InterlockedDecrement
LocalFree
CloseHandle
GetCurrentProcess
CreateProcessA
WriteFile
CreateFileA
GetTempPathA
lstrcmpA
SleepEx
ReleaseMutex
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
GetVolumeInformationA
GetSystemTimeAsFileTime
SetFilePointer
InterlockedIncrement
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetProcessHeap
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
CharNextA
CharNextW
GetLengthSid
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
OpenProcessToken
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
LoadRegTypeLi
VarUI4FromStr
SysAllocStringLen
VariantClear
VariantInit
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientLocid
GetClientTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ