DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientLocid
GetClientTicket
Static task
static1
Behavioral task
behavioral1
Sample
113e7a95d4bf1379ed5fc3275ebfa3b8_JaffaCakes118.dll
Resource
win7-20240903-en
Target
113e7a95d4bf1379ed5fc3275ebfa3b8_JaffaCakes118
Size
137KB
MD5
113e7a95d4bf1379ed5fc3275ebfa3b8
SHA1
a415bb756b422232942431e87e2dbb8c5432c8f6
SHA256
c093bdc0e2a6415bcd658374787e5341e5d0fcf29c0a6a76fb409239f8a78097
SHA512
b8f754ab333d14686f9ee2b2b4449447dbc81fc316d64966cb40609c9b8e9f46efe42b4805e115bed8014b6f3d79f0cbbf8bf9c41e4db670d5d4c1f0b8a95810
SSDEEP
3072:KVXyIcP7SqPEFNA9+sjxmhxHRpM5ZpAxrBf9b:Tl+sjct78ud
Checks for missing Authenticode signature.
resource |
---|
113e7a95d4bf1379ed5fc3275ebfa3b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetGetConnectedState
HttpQueryInfoA
InternetSetCookieA
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestA
PathFileExistsA
StrStrIA
wnsprintfA
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetProcAddress
lstrlenA
lstrlenW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
lstrcmpiA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
HeapReAlloc
HeapAlloc
LoadLibraryA
TerminateThread
HeapFree
InterlockedDecrement
LocalFree
CloseHandle
GetCurrentProcess
CreateProcessA
WriteFile
CreateFileA
GetTempPathA
lstrcmpA
SleepEx
ReleaseMutex
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
GetVolumeInformationA
GetSystemTimeAsFileTime
SetFilePointer
InterlockedIncrement
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetProcessHeap
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
CharNextA
CharNextW
GetLengthSid
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
OpenProcessToken
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
LoadRegTypeLi
VarUI4FromStr
SysAllocStringLen
VariantClear
VariantInit
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientLocid
GetClientTicket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ