DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1770097181ef26f983e1b977db1d0068_JaffaCakes118.dll
Resource
win7-20240903-en
Target
1770097181ef26f983e1b977db1d0068_JaffaCakes118
Size
133KB
MD5
1770097181ef26f983e1b977db1d0068
SHA1
3a731c05fdc28f9f00fa0e8c879eb1074ea9b90b
SHA256
91d11314acbffdfe7b20a932c2c11d649a1268d7402a67444f08191929760cf5
SHA512
94b6b9de61825c6e74f62468ffe3e4382cc529021597ed00ea8c51a1e085093b7624a47e036590f3a3cf6289d17c06fe6ac7af2c2061afd33db566fd210ed748
SSDEEP
1536:SPyGnoS9s4hQO2OH09HKZ5QlIS3TlGwYfuH1yUcLsBRkBrb:yy79tOH09H456jQs1yUcoBir
Checks for missing Authenticode signature.
resource |
---|
1770097181ef26f983e1b977db1d0068_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
lstrcpynW
lstrcpyW
lstrcatW
Sleep
CreateFileA
GetTempPathA
FlushFileBuffers
WriteFile
DeleteFileA
DeviceIoControl
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
WriteProcessMemory
GetCurrentProcess
VirtualProtect
DebugBreak
SetErrorMode
OpenEventA
ExitProcess
OutputDebugStringA
LoadLibraryA
GetWindowsDirectoryA
LocalFree
lstrcmpiW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetShortPathNameW
lstrlenW
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
CreateThread
InitializeCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
HeapDestroy
CreateToolhelp32Snapshot
Process32FirstW
CloseHandle
Process32NextW
GetCurrentProcessId
MessageBoxW
CharLowerW
wsprintfA
SetWindowLongW
CharNextW
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
VariantClear
SysAllocStringLen
LoadRegTypeLi
SysStringLen
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
VarUI4FromStr
_except_handler3
_CxxThrowException
_strlwr
_stricmp
_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
strrchr
abort
atoi
wcscpy
strncpy
strchr
strstr
sprintf
_wcslwr
_wcsicmp
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
__CxxFrameHandler
free
malloc
realloc
wcslen
wcsstr
HttpQueryInfoA
InternetOpenUrlA
InternetReadFile
InternetOpenA
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ