DllCanUnloadNow
DllGetClassObject
DllGetData2
DllRegisterServer
DllUnregisterServer
GreatBall
GreatBall1
Static task
static1
Behavioral task
behavioral1
Sample
f5b16fb1d7acf947ec7fc2dd832b5e6e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f5b16fb1d7acf947ec7fc2dd832b5e6e_JaffaCakes118
Size
164KB
MD5
f5b16fb1d7acf947ec7fc2dd832b5e6e
SHA1
8a0347ba7e1504a7bb1503c793f1c0c4ab86d84c
SHA256
186e75f57865192d721c41581abc7094c6ed4ebc49c4223da9ee4e8222f69cc2
SHA512
7b8b39e7d7417c20f5dda75285ba3ba3d41189489630d9c645da9ff7cf9301932ac031c3a6eb00c1fffcc9ba7ba55b0641e2f2844581a5bfe436ec823e8dcf4b
SSDEEP
3072:metQGoObDwoA05BrhP5bkf2Wor5RwXo5OmojbKFkn0n:mgXA6dP9LWow2O/Uk0
Checks for missing Authenticode signature.
resource |
---|
f5b16fb1d7acf947ec7fc2dd832b5e6e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCloseHandle
InternetAttemptConnect
HttpQueryInfoA
InternetCrackUrlA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetConnectA
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
FreeLibrary
LoadLibraryA
CloseHandle
CreateFileA
GetFileAttributesA
GetVersion
WaitForSingleObject
DeleteFileA
GetTempPathA
OpenMutexA
CreateMutexA
GetSystemDirectoryA
CreateDirectoryA
WriteFile
ReleaseMutex
GetLocalTime
lstrlenW
GetEnvironmentVariableA
MoveFileA
GetTempFileNameA
SetFileAttributesA
MoveFileExA
EnterCriticalSection
SetFilePointer
lstrcatA
GetShortPathNameA
LocalFree
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
ReadFile
LeaveCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DisableThreadLibraryCalls
GetWindowsDirectoryA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetModuleFileNameA
GetProcAddress
LCMapStringA
LCMapStringW
IsBadWritePtr
CompareStringW
VirtualAlloc
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
FlushFileBuffers
CompareStringA
GetFileSize
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
GetTimeZoneInformation
RtlUnwind
RaiseException
GetCommandLineA
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetModuleHandleA
wsprintfA
GetDC
ReleaseDC
ShowWindow
SetWindowPos
SetActiveWindow
SetForegroundWindow
SetFocus
BringWindowToTop
GetDeviceCaps
GetNamedSecurityInfoA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
SetNamedSecurityInfoA
GetUserNameA
RegCloseKey
SetEntriesInAclA
ShellExecuteExA
CoCreateInstance
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SysAllocString
VariantChangeType
VariantClear
SysFreeString
ord23
ord15
ord57
ord21
ord16
ord32
ord58
ord30
ord31
UuidCreate
UuidToStringA
Netbios
DllCanUnloadNow
DllGetClassObject
DllGetData2
DllRegisterServer
DllUnregisterServer
GreatBall
GreatBall1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ