DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0ef6d3bbc8ed9e9e6611c9e57c319490_JaffaCakes118.dll
Resource
win7-20240729-en
Target
0ef6d3bbc8ed9e9e6611c9e57c319490_JaffaCakes118
Size
62KB
MD5
0ef6d3bbc8ed9e9e6611c9e57c319490
SHA1
b15727bf4d2d8b6477da6eca1ee2b3b4e40be133
SHA256
61aa1f23037ac72593cf154ba00ab10c346316719e96fde869f1a7ca2390fcd6
SHA512
5dfd7fb1b1cc38f223b1c823a296748c83ebd6183fe92eeab01f856866c61ba30c3051483e633d19b1b0f2f7487c7a600a663465888c79608fa3a1c4c629609b
SSDEEP
768:hV8+oaNhiHny0gFD3w3JN8jOosLVdr4WHHuv+veDwS/J3Mm:hKbS0gFDA3JejOosJdrTS+veDwcdM
Checks for missing Authenticode signature.
resource |
---|
0ef6d3bbc8ed9e9e6611c9e57c319490_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyW
GetTickCount
ExitThread
WaitForSingleObject
CloseHandle
lstrlenW
GetVersionExA
GetSystemDirectoryA
lstrcatW
GetModuleHandleA
GetProcessHeap
HeapFree
IsBadStringPtrA
lstrcmpA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
GetFileAttributesA
FindClose
GetCurrentDirectoryA
PulseEvent
GetLastError
GetFileSize
SetEvent
HeapAlloc
HeapReAlloc
lstrlenA
CompareStringW
Sleep
lstrcatA
SetFilePointer
CreateFileA
ReleaseMutex
SetEndOfFile
GetModuleHandleW
CreateEventA
CreateMutexW
CreateThread
ReadFile
WriteFile
WriteProcessMemory
GetCurrentProcess
VirtualProtect
lstrcmpiA
lstrcpyA
CharLowerA
CharUpperW
wsprintfW
wsprintfA
CryptDestroyKey
CryptDestroyHash
CryptEncrypt
CryptDeriveKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptDecrypt
InitializeSecurityDescriptor
CryptReleaseContext
SysAllocString
SysFreeString
InternetCrackUrlA
InternetConnectA
InternetCrackUrlW
CoInternetCombineUrl
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ