DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2a5c75af7a1a8b39500d224688f3e7c1_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2a5c75af7a1a8b39500d224688f3e7c1_JaffaCakes118
Size
136KB
MD5
2a5c75af7a1a8b39500d224688f3e7c1
SHA1
ec8f6cde89201d70ac6a4701b7483ad2a83b3493
SHA256
11c4483ffe780a6bc5dea4be63d3283aba92ae2c6861d8aa14d9f7cae2f10c41
SHA512
ae6f5cd8623842a5b70393e30cfed8ac4332d9f16aa3b83db6b1986d98c5149ab2110a5cbc48005d73007fd4f9b45fc19ae87bad0328424397f42371d7b9e0ee
SSDEEP
1536:5H7yZrjX+ifc/MF7HgqohSh/wEVTwCt2SYS+W6+2DyYCBQ6BVl8rU+scBcY:5bgr7I/igqX/htoqjO6BVl8zscBc
Checks for missing Authenticode signature.
resource |
---|
2a5c75af7a1a8b39500d224688f3e7c1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CharNextA
CharLowerA
IsWindow
SendMessageA
wsprintfA
URLDownloadToCacheFileA
RegDeleteKeyA
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
SHGetValueA
SHGetSpecialFolderPathA
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CompareStringA
CompareStringW
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
CloseHandle
CreateMutexA
GetModuleHandleA
SetEvent
OpenEventA
ReleaseMutex
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
GetVersion
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
GetVersionExA
lstrlenA
GetModuleFileNameA
SizeofResource
GetSystemDirectoryA
GetWindowsDirectoryA
LoadResource
FindResourceA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
UnmapViewOfFile
CreateThread
HeapAlloc
GetProcessHeap
MapViewOfFile
OpenFileMappingA
DisableThreadLibraryCalls
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
GetFileSize
GetFileTime
CreateFileA
lstrcpyA
lstrcatA
FreeLibrary
GetProcAddress
LoadLibraryA
HeapFree
GetLastError
CopyFileA
GetCommandLineA
IsProcessorFeaturePresent
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
GetLocaleInfoA
GetTimeZoneInformation
ReadFile
VirtualQuery
OpenMutexA
CreateProcessA
CreateProcessW
GetLongPathNameW
FindClose
FindFirstFileA
WriteFile
SetFilePointer
DeleteFileA
SetFileAttributesA
SetEnvironmentVariableA
GetVolumeInformationA
Sleep
TerminateProcess
FormatMessageA
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
HeapSize
GetCurrentProcess
ExitProcess
RaiseException
GetLocalTime
GetSystemTime
HeapReAlloc
RtlUnwind
InterlockedExchange
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
VariantChangeType
SysFreeString
VariantClear
VariantInit
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SysAllocString
VarUI4FromStr
RegisterTypeLi
LoadTypeLi
GetAdaptersInfo
InternetCloseHandle
InternetOpenA
DeleteUrlCacheEntry
InternetGetConnectedState
InternetReadFile
InternetOpenUrlA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ