DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2de21ce858a963f3ca7780e6e8db0fdf_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2de21ce858a963f3ca7780e6e8db0fdf_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2de21ce858a963f3ca7780e6e8db0fdf_JaffaCakes118
Size
88KB
MD5
2de21ce858a963f3ca7780e6e8db0fdf
SHA1
11626fb46b48de30edb4b6ccc180411c5fa87417
SHA256
19c3d1ad961e575a25f0c1d8d760f7a81f74f7919dea90bbc7975f6b6c372dba
SHA512
aba1af2e31322b5c26e7ecbdcfb2c81da767065bb9a79fde1a07b293efe4365ced0f28f483e766dc73d689082acebc5f72801033a0e3c64c0f5eb617b53092b7
SSDEEP
1536:qeeK32F2RaKIKtl8BuAU7iTa6TdiF5ojJvt:qp1HKr8u76iF5opt
Checks for missing Authenticode signature.
resource |
---|
2de21ce858a963f3ca7780e6e8db0fdf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionExA
lstrcmpiA
GetVolumeInformationA
GetUserDefaultLangID
GetSystemDefaultLangID
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
MultiByteToWideChar
GetShortPathNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
GetCurrentProcess
FindResourceA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
WriteFile
GetWindowsDirectoryA
DebugBreak
OutputDebugStringA
SetPriorityClass
CreateFileA
DeviceIoControl
CloseHandle
InterlockedDecrement
InterlockedIncrement
lstrlenA
GetLastError
LoadResource
GetModuleFileNameA
FlushFileBuffers
SetStdHandle
RtlUnwind
SetFilePointer
LCMapStringW
LCMapStringA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
wvsprintfA
CharNextA
LoadStringA
MessageBoxA
CharLowerA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegEnumValueA
ShellExecuteA
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
LoadTypeLi
SysFreeString
VarUI4FromStr
SysAllocString
RegisterTypeLi
LoadRegTypeLi
SysStringLen
SHDeleteKeyA
InternetQueryDataAvailable
InternetCombineUrlA
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ