DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ea568402634b5b82750dc9a2a7a3a21a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ea568402634b5b82750dc9a2a7a3a21a_JaffaCakes118
Size
655KB
MD5
ea568402634b5b82750dc9a2a7a3a21a
SHA1
2c648dde9d68c79041070ec9df570aa68d9453b6
SHA256
5d8cda0ce3d2b7f9c447b60fceb79c9728a3ac5fec15cd8591c985ab1cd2f77e
SHA512
a84b00d2499e521f4cba3554f591c0421d69023a6b6f329f67a654fe1f6fcadf82862550190c0b9a2413fd6f16d08df32e66e3c833e67d03be4bfc0543b65e7d
SSDEEP
12288:z9Gxx004vs7czGLYwUwlm3zWdR4EIhD+IX4OACge4rdrLTB75Vr4hEa0:ET4v7zGxRljP4EIUIU7TB75VMhJ0
Checks for missing Authenticode signature.
resource |
---|
ea568402634b5b82750dc9a2a7a3a21a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathMatchSpecW
PathIsDirectoryW
PathFileExistsW
UrlUnescapeW
StrStrIW
UrlGetPartW
UrlEscapeW
StrCmpIW
GetSystemTimeAsFileTime
CompareStringW
CompareStringA
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryA
GetDriveTypeA
GetProcessHeap
SetEndOfFile
CreateFileA
GetModuleHandleA
GetTimeZoneInformation
CreateFileW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentDirectoryA
SetFilePointer
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetOEMCP
GetACP
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
HeapReAlloc
VirtualAlloc
WriteFile
GetFullPathNameW
InitializeCriticalSection
LeaveCriticalSection
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
Sleep
InterlockedExchange
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
SetEnvironmentVariableA
ExitThread
CreateThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
EnumChildWindows
RealGetWindowClassW
GetWindowTextW
SendMessageW
SetWindowLongW
CallWindowProcW
wsprintfW
GetWindowLongW
SetWindowTextW
SetWindowPos
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateGuid
VariantClear
VariantInit
VariantChangeType
VariantCopy
VarBstrCmp
SysStringLen
SysAllocString
SysFreeString
inet_addr
RpcStringFreeW
UuidToStringW
UrlMkGetSessionOption
MapAndLoad
UnMapAndLoad
SHCreateDirectoryExW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ