DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e0e0215a5e782aae41363ac0b91138b2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e0e0215a5e782aae41363ac0b91138b2_JaffaCakes118
Size
132KB
MD5
e0e0215a5e782aae41363ac0b91138b2
SHA1
d43d1d11b74aa0a1ee63c68602c622370c80584e
SHA256
4f2e89044b665fcb84d4586dd2aa5fdf43178f064ef9b3cf4d895a9f3ccb823c
SHA512
4014b837cd0cbb5c541f0223ca768031d37202a1ef2711f6ab13f68a8182b6cc63e37122b0a14e33272101048c6f21c26d2d040ec37cfc00998c17ac1ae223a1
SSDEEP
1536:AW6YZOnSwWqN2hi9vHfaEdTaEy6ThPOlO3Tl7ocHz1gh2XwHH1aOFC:AgWkcOi9vFdoQDR0uz1gh2gHH1rw
Checks for missing Authenticode signature.
resource |
---|
e0e0215a5e782aae41363ac0b91138b2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetAdaptersInfo
StrStrA
StrChrA
StrStrIA
TlsAlloc
CreateFileA
WritePrivateProfileStringA
GetWindowsDirectoryA
MoveFileExA
GetTempFileNameA
GetTempPathA
CreateProcessA
MoveFileA
DeleteFileA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
CreateDirectoryA
lstrcmpA
FreeLibrary
GetProcAddress
LoadLibraryA
ReadFile
TlsGetValue
CloseHandle
GetFileSize
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
GetShortPathNameA
GetModuleHandleA
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
IsDBCSLeadByte
HeapDestroy
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
TlsSetValue
GetVolumeInformationA
GetTimeZoneInformation
GetSystemTime
TlsFree
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
VirtualFree
ExitProcess
GetEnvironmentVariableA
GetVersionExA
HeapCreate
RtlUnwind
TerminateProcess
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetStringTypeA
GetStringTypeW
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers
GetModuleFileNameA
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateThread
GetPrivateProfileIntA
lstrcmpiA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GetSystemDirectoryA
lstrcatA
lstrcpynA
lstrcpyA
EnterCriticalSection
ExitThread
InterlockedDecrement
LeaveCriticalSection
lstrlenW
VirtualAlloc
InterlockedIncrement
GetLocalTime
HeapReAlloc
SetWindowLongA
CreateWindowExA
UnionRect
PtInRect
GetKeyState
RegisterClassExA
ShowWindow
DefWindowProcA
GetWindowLongA
GetParent
LoadStringA
CallWindowProcA
IsWindow
SendMessageA
wsprintfA
CharNextA
SetWindowRgn
SetWindowPos
InvalidateRect
DestroyWindow
IsChild
GetFocus
EqualRect
LoadCursorA
EndPaint
IntersectRect
GetClassInfoExA
ReleaseDC
GetDC
GetClientRect
BeginPaint
OffsetRect
SetParent
GetKeyboardLayout
SetFocus
RestoreDC
SetWindowOrgEx
SetMapMode
SetViewportOrgEx
LPtoDP
GetDeviceCaps
SaveDC
CreateFontA
CreateDCA
CreateRectRgnIndirect
DeleteDC
RegQueryValueExA
RegEnumKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegCloseKey
RegEnumValueA
RegEnumKeyA
RegFlushKey
RegSetValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
OleRegGetUserType
CreateOleAdviseHolder
WriteClassStm
OleLoadFromStream
OleRegGetMiscStatus
OleRegEnumVerbs
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
OleSaveToStream
CoCreateInstance
CoInitialize
CoTaskMemAlloc
LoadRegTypeLi
OleCreatePropertyFrame
SysStringByteLen
SysAllocStringByteLen
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
SysFreeString
VariantChangeType
SysAllocString
SysStringLen
SysAllocStringLen
VariantClear
InitCommonControlsEx
URLDownloadToFileA
CreateURLMoniker
URLDownloadToCacheFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ