DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
UpxCompress_a
UpxDecompress_a
Static task
static1
Behavioral task
behavioral1
Sample
14c9883096ef2c0125fb411f6ea0db22_JaffaCakes118.dll
Resource
win7-20240903-en
Target
14c9883096ef2c0125fb411f6ea0db22_JaffaCakes118
Size
196KB
MD5
14c9883096ef2c0125fb411f6ea0db22
SHA1
5660635993049cc79eba41f26146d86747f479b6
SHA256
c0f6c2176695c7ad63c2cc938a600572587027ab598831aef26be08d9751b948
SHA512
8b5d028ff9ffc4937b182af7b18f837f67adbac4497d5479d690f79900db49a84d8a9900db777926b51f7f38a24aeb05a9688c8fd67a1273a0eea75308c06a24
SSDEEP
1536:XLy66oS9lGy16e2P07rYIJUCBtTIFQ4pgGyaGV/9n5M6B81RufsE41yo2jQ:7yWcn2P07rYIJUCBoq81yTQ
Checks for missing Authenticode signature.
resource |
---|
14c9883096ef2c0125fb411f6ea0db22_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
lstrcpynW
lstrcpyW
lstrcatW
GetLocalTime
Sleep
CreateFileA
GetTempPathA
FlushFileBuffers
WriteFile
DeleteFileA
DeviceIoControl
WideCharToMultiByte
GetCurrentProcessId
MultiByteToWideChar
GetModuleHandleA
GetCurrentProcess
DebugBreak
SetErrorMode
OpenEventA
ExitProcess
OutputDebugStringA
LoadLibraryA
GetWindowsDirectoryA
IsBadCodePtr
SetUnhandledExceptionFilter
RaiseException
LocalFree
lstrcmpiW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetShortPathNameW
lstrlenW
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
CreateThread
InitializeCriticalSection
DisableThreadLibraryCalls
CloseHandle
DeleteCriticalSection
HeapDestroy
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetProcAddress
CharNextW
wsprintfA
SetWindowLongW
MessageBoxW
CharLowerW
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
VariantClear
SysAllocStringLen
LoadRegTypeLi
SysStringLen
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
VarUI4FromStr
_onexit
_stricmp
_adjust_fdiv
_initterm
_strlwr
__dllonexit
?terminate@@YAXXZ
_except_handler3
strrchr
abort
atoi
wcscpy
strncpy
strchr
strstr
_wcsicmp
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
__CxxFrameHandler
free
malloc
realloc
wcslen
wcsstr
_wcslwr
sprintf
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
HttpQueryInfoA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
UpxCompress_a
UpxDecompress_a
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ