DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fae4fb2029af21a31f00a82b9dd888f2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fae4fb2029af21a31f00a82b9dd888f2_JaffaCakes118
Size
160KB
MD5
fae4fb2029af21a31f00a82b9dd888f2
SHA1
49185813d8aa9fe3699c57c9095880e47f3d5d9a
SHA256
22c318a87cebe3a41127a5549b80839d3dc6ca45a1b69729748a6b237a8afa68
SHA512
5f827c695ea8e639f339b03ec9df66a763ba067f7a0223eee555d2a7317d186223570373aa312d8b261b45e4ce61a0a6c91dcc81145307761a4b7896f1a65648
SSDEEP
3072:AOzPSHjrvND65IXl7vnvL3GEpEVLsF/StKhlMAq:AnXKUd2csLW5hU
Checks for missing Authenticode signature.
resource |
---|
fae4fb2029af21a31f00a82b9dd888f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCloseHandle
InternetQueryDataAvailable
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetGetConnectedState
HttpAddRequestHeadersA
InternetOpenA
GetLastError
VirtualQuery
FreeLibrary
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
lstrcatA
lstrlenA
lstrcpyA
GetTickCount
GetLocalTime
GetVersion
WideCharToMultiByte
lstrcpyW
lstrlenW
GetModuleFileNameA
ReadFile
GetFileSize
TerminateProcess
WaitForSingleObject
CopyFileA
DeleteFileA
Sleep
MultiByteToWideChar
lstrcmpA
VirtualProtect
lstrcpynW
lstrcatW
lstrcmpW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiA
CreateThread
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringA
lstrcpynA
GetStartupInfoA
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
LCMapStringW
HeapSize
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
SetLastError
TlsFree
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapAlloc
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
VirtualAlloc
GetSystemInfo
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
GetCPInfo
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
CharNextA
CharLowerA
wsprintfA
CharUpperW
CharUpperA
UnregisterClassA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCloseKey
ShellExecuteExA
SHGetSpecialFolderPathA
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ