DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
159e45a9aed1f7d5a5332fa32ce16224_JaffaCakes118.dll
Resource
win7-20240903-en
Target
159e45a9aed1f7d5a5332fa32ce16224_JaffaCakes118
Size
300KB
MD5
159e45a9aed1f7d5a5332fa32ce16224
SHA1
6c546b790b3ac08059a94b2824b6a58bca817135
SHA256
f44ca8d75bd9ced1fa6c7b0f78bad40e064c3949bf7b58539a3e438477d3efd6
SHA512
39073fcfab9dd899a93c41af51f8acf35aaa64f2cc7eec1ca734ac8bdb3d0a66b2a3f22bc34bdc3ff6d1d0f042b34c0d6b5b25bbe31848d9b73cfbdf257e3e93
SSDEEP
6144:gC5BxXGSLoJduXrtt67StOSTEMvT5eTi:gC5BxXTC8XhtK6T2i
Checks for missing Authenticode signature.
resource |
---|
159e45a9aed1f7d5a5332fa32ce16224_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
Sleep
SetEvent
CreateFileW
SetFilePointer
WriteFile
InterlockedIncrement
InterlockedDecrement
FreeLibrary
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
DisableThreadLibraryCalls
CloseHandle
RaiseException
GetLastError
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetSystemTime
GetTempFileNameW
CreateProcessW
WideCharToMultiByte
LoadLibraryA
CreateFileA
ResetEvent
WaitForSingleObject
OpenEventW
GetWindowsDirectoryW
GetTickCount
LocalAlloc
lstrlenW
FormatMessageW
GetModuleFileNameW
LocalFree
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetStringTypeA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
FreeEnvironmentStringsA
GetStringTypeW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
MessageBoxW
CharNextW
UnregisterClassA
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysFreeString
SysAllocString
LoadRegTypeLi
StrToIntW
InternetConnectW
InternetAttemptConnect
InternetCloseHandle
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetReadFile
HttpQueryInfoW
InternetOpenW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ