DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0ca3cc610a40aa0695af7e9b478ebaea_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0ca3cc610a40aa0695af7e9b478ebaea_JaffaCakes118
Size
216KB
MD5
0ca3cc610a40aa0695af7e9b478ebaea
SHA1
67db7f5b36f284916607e09873ff668ab410ce22
SHA256
ea07a96acec54c7006aa99a351ad95344bf15bcccce4802516ce326746c91e5e
SHA512
239cd49082df28e3216c41e2b96e1e011474408d42e272b0a3494774dc124a979d0e32d10ad240465292d643462ff127f70ed50350ef3651af72ac223477eccc
SSDEEP
3072:kD8+wOfbIYNHodYzWM+CPEr24YdLq+fR3ym9Mj0phPjeFxg1t1xip5U:wDIYNIdYzWM+CPOBYpftjeWH9C6
Checks for missing Authenticode signature.
resource |
---|
0ca3cc610a40aa0695af7e9b478ebaea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
CreateThread
GetModuleFileNameW
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetLastError
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
FormatMessageW
DeleteCriticalSection
RaiseException
LeaveCriticalSection
EnterCriticalSection
GetSystemTime
GetTempFileNameW
CreateProcessW
WideCharToMultiByte
CreateFileA
SetEndOfFile
lstrlenW
LocalAlloc
LocalFree
OpenEventW
WaitForSingleObject
ResetEvent
CloseHandle
GetTickCount
lstrcmpiW
GetWindowsDirectoryW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
CreateFileW
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
HeapAlloc
HeapFree
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
GetModuleFileNameA
ExitProcess
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
VirtualFree
HeapDestroy
HeapCreate
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
CharNextW
MessageBoxW
UnregisterClassA
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
LoadTypeLi
UnRegisterTypeLi
SysStringLen
SysAllocString
SysFreeString
VarUI4FromStr
LoadRegTypeLi
RegisterTypeLi
InternetAttemptConnect
InternetConnectW
InternetOpenW
InternetCloseHandle
HttpSendRequestW
HttpAddRequestHeadersW
HttpQueryInfoW
InternetReadFile
HttpOpenRequestW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ