DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fb6793ea52d4024a3eee296253887e28_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fb6793ea52d4024a3eee296253887e28_JaffaCakes118
Size
168KB
MD5
fb6793ea52d4024a3eee296253887e28
SHA1
a7f824b547f0d43f1127926fb19d5c5ea6649ad7
SHA256
3b0f66fba7ec4f5d7449ccfab43afc7e237a7f5eaf86d74ae60046ef8a744035
SHA512
561235935e3ff28821a1ea280ad4bd8dee5f3d9239e741808b705c1b9d40fab1eb37482fdde8ac654090cf39ca6a2b6d86bc28944542f85bb340c3f45a7fed54
SSDEEP
3072:JvgRjuL073LRyaxwa/empY1HTxyuWvca7Pl0f:Jvg+k7RN1zYFVyuW1+
Checks for missing Authenticode signature.
resource |
---|
fb6793ea52d4024a3eee296253887e28_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThreadId
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
lstrlenA
lstrcmpiA
LoadLibraryExA
lstrcpynA
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
CloseHandle
GetModuleFileNameA
FreeLibrary
CreateEventA
OpenEventA
lstrcpyW
GetDateFormatA
GetTimeFormatA
WriteFile
SetFilePointer
CreateFileA
DeleteFileA
GetTickCount
lstrcpyA
lstrcatA
IsBadReadPtr
GetVolumeInformationA
OutputDebugStringA
HeapReAlloc
HeapSize
GetModuleFileNameW
SetLastError
FlushFileBuffers
SetStdHandle
GetLocaleInfoW
LoadLibraryA
IsBadCodePtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetStringTypeA
GetOEMCP
TerminateProcess
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetCurrentProcessId
QueryPerformanceCounter
IsBadWritePtr
VirtualFree
HeapCreate
SetUnhandledExceptionFilter
GetLastError
LoadLibraryW
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
LCMapStringW
LCMapStringA
GetCommandLineA
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
RaiseException
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
HeapDestroy
LocalFree
ExitProcess
RtlUnwind
VirtualProtect
GetModuleHandleA
EndPaint
GetWindowTextLengthA
GetWindowTextA
SetWindowLongA
SendMessageA
GetClientRect
SetCursor
BeginPaint
MoveWindow
UpdateWindow
InvalidateRect
RedrawWindow
GetParent
wsprintfA
LoadCursorA
PostMessageA
CopyRect
IsWindowVisible
ScreenToClient
GetWindowRect
GetDlgItem
ShowWindow
CharNextA
DrawTextA
CallWindowProcA
GetWindowLongA
IsWindow
DefWindowProcA
CreateWindowExA
GetClassInfoExA
RegisterClassExA
UnregisterClassA
FillRect
TrackMouseEvent
DestroyWindow
RegEnumKeyExA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
RegQueryInfoKeyA
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
ShellExecuteA
UnRegisterTypeLi
RegisterTypeLi
SysAllocString
SysStringLen
LoadTypeLi
LoadRegTypeLi
DispCallFunc
VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
VariantClear
VariantInit
SysFreeString
VariantChangeType
PathAppendA
PathFindExtensionA
UrlUnescapeA
PathRemoveFileSpecA
SetBkMode
SetTextColor
CreateSolidBrush
DeleteObject
RoundRect
CreatePen
SelectObject
GetStockObject
CreateFontA
HttpQueryInfoA
InternetSetStatusCallback
InternetReadFileExA
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
GetAdaptersInfo
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ