DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientTicket
Static task
static1
Behavioral task
behavioral1
Sample
fa18337abbdf55ea13e37db7fcaf5368_JaffaCakes118.dll
Resource
win7-20240704-en
Target
fa18337abbdf55ea13e37db7fcaf5368_JaffaCakes118
Size
125KB
MD5
fa18337abbdf55ea13e37db7fcaf5368
SHA1
d98085067510a7405ea91b8342dcfb6fb9b854f6
SHA256
cf766e828262786359afb6c5831c3bcfd7828c25aaf3a17d197f13df9962b9d7
SHA512
5694bec89f3df1c0ff82865f7254f3a22ff31da5aed1ecefd9d71ad91b7e45e56e06fe1d8593cb4c55888e55544b3dd730544350a918c85286f6baf3b6434a52
SSDEEP
1536:Q9C2gyoDWqv9vGixcB3oxvz5pQ8j1S3y8vpXKgOdprduhZ5VoLSpCQhg9B:J2gyiW2GixYofu4Dgupr0f5VVpkB
Checks for missing Authenticode signature.
resource |
---|
fa18337abbdf55ea13e37db7fcaf5368_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HttpOpenRequestA
InternetReadFile
InternetConnectA
HttpQueryInfoA
InternetSetCookieA
InternetCrackUrlA
InternetCloseHandle
InternetOpenA
HttpSendRequestA
InternetGetConnectedState
StrStrIA
PathFileExistsA
wnsprintfA
GetModuleFileNameA
GetModuleHandleA
DeleteCriticalSection
lstrlenA
GetModuleHandleW
WideCharToMultiByte
LeaveCriticalSection
MultiByteToWideChar
lstrlenW
SetThreadLocale
GetLastError
GetThreadLocale
GetProcAddress
EnterCriticalSection
FindResourceA
FreeLibrary
LoadResource
SizeofResource
IsDBCSLeadByte
lstrcmpiA
LoadLibraryExA
HeapReAlloc
CreateFileA
lstrcmpA
RaiseException
GetCurrentProcess
HeapFree
WaitForSingleObject
SleepEx
GetProcessHeap
WriteFile
TerminateThread
Sleep
CreateProcessA
LoadLibraryA
CreateMutexA
ReleaseMutex
CloseHandle
GetTempPathA
LocalFree
CreateThread
GetComputerNameA
GetVolumeInformationA
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapAlloc
RtlUnwind
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
VirtualFree
HeapDestroy
HeapCreate
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
CharNextA
CharNextW
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
GetLengthSid
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
OpenProcessToken
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyExA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteKeyA
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
LoadRegTypeLi
VarUI4FromStr
SysAllocStringLen
VariantInit
VariantClear
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ