DllCanUnloadNow
DllGetClassObject
DllGetData2
DllRegisterServer
DllUnregisterServer
GreatBall
GreatBall1
Static task
static1
Behavioral task
behavioral1
Sample
d606f8f5a83af01a83e865a619c2dfbc_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d606f8f5a83af01a83e865a619c2dfbc_JaffaCakes118
Size
164KB
MD5
d606f8f5a83af01a83e865a619c2dfbc
SHA1
3bdbf7189957f2d217c2f9a7eac99ac573c9016a
SHA256
83350044a0a0393e43ca537bb806606c3a587d113a97ddcf3d19f0dafe06abbf
SHA512
c3afe0f1fbddf70f6df6c618b5ec78703d3945cbb6394aa0c274484a67d5903993e033c83f5520845ab378227ce29bed020f623e470ffe2d3b82206d63df1ecc
SSDEEP
3072:AetQGoObDwoA05BrhP5bkf2Wor5RwXofOmojbKFkngn:AgXA6dP9LWowgO/Ukg
Checks for missing Authenticode signature.
resource |
---|
d606f8f5a83af01a83e865a619c2dfbc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCloseHandle
InternetAttemptConnect
HttpQueryInfoA
InternetCrackUrlA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetConnectA
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
FreeLibrary
LoadLibraryA
CloseHandle
CreateFileA
GetFileAttributesA
GetVersion
WaitForSingleObject
DeleteFileA
GetTempPathA
OpenMutexA
CreateMutexA
GetSystemDirectoryA
CreateDirectoryA
WriteFile
ReleaseMutex
GetLocalTime
lstrlenW
GetEnvironmentVariableA
MoveFileA
GetTempFileNameA
SetFileAttributesA
MoveFileExA
EnterCriticalSection
SetFilePointer
lstrcatA
GetShortPathNameA
LocalFree
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
ReadFile
LeaveCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DisableThreadLibraryCalls
GetWindowsDirectoryA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetModuleFileNameA
GetProcAddress
LCMapStringA
LCMapStringW
IsBadWritePtr
CompareStringW
VirtualAlloc
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
FlushFileBuffers
CompareStringA
GetFileSize
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
GetTimeZoneInformation
RtlUnwind
RaiseException
GetCommandLineA
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetModuleHandleA
wsprintfA
GetDC
ReleaseDC
ShowWindow
SetWindowPos
SetActiveWindow
SetForegroundWindow
SetFocus
BringWindowToTop
GetDeviceCaps
GetNamedSecurityInfoA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
SetNamedSecurityInfoA
GetUserNameA
RegCloseKey
SetEntriesInAclA
ShellExecuteExA
CoCreateInstance
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SysAllocString
VariantChangeType
VariantClear
SysFreeString
ord23
ord15
ord57
ord21
ord16
ord32
ord58
ord30
ord31
UuidCreate
UuidToStringA
Netbios
DllCanUnloadNow
DllGetClassObject
DllGetData2
DllRegisterServer
DllUnregisterServer
GreatBall
GreatBall1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ