DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2eafad7bc8eecb0f19d1e80f3a31a562_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2eafad7bc8eecb0f19d1e80f3a31a562_JaffaCakes118
Size
180KB
MD5
2eafad7bc8eecb0f19d1e80f3a31a562
SHA1
44e410a8b59b0024e4d5782273f262ee64b8b049
SHA256
d3c869d91f21b193e6ec3ac245bb669432e6aae69b140c43268dd2808c0e3b0b
SHA512
fcbae25d4e8a44c4c94952f189bc8a54629935ad11eb8f983a3265b699de02850b1b1e924d1e6af5c80aadab711746f6815ac108f88942bb4271b0bc2c9669e4
SSDEEP
3072:1yHBpnUSwA3O7poYFpPsPUZweiji0Vp20wqtYyvu5N:1CBpnlw0O7p6rLi8p2XD8
Checks for missing Authenticode signature.
resource |
---|
2eafad7bc8eecb0f19d1e80f3a31a562_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HttpAddRequestHeadersA
InternetCloseHandle
InternetQueryDataAvailable
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetOpenA
InternetGetConnectedState
InternetConnectA
connect
closesocket
WSAStartup
gethostbyname
WSACleanup
inet_addr
socket
htons
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentProcessId
QueryPerformanceCounter
VirtualProtect
VirtualQuery
FindAtomA
GetConsoleTitleA
GetCurrentThread
GetTempPathA
FreeLibrary
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
WideCharToMultiByte
lstrcatA
lstrlenA
lstrcpyA
GetTickCount
GetLocalTime
GetVersion
lstrcpyW
lstrlenW
GetModuleFileNameA
ReadFile
GetFileSize
TerminateProcess
WaitForSingleObject
DeleteFileA
MultiByteToWideChar
lstrcmpA
lstrcpynA
lstrcpynW
lstrcatW
lstrcmpW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiA
CreateThread
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
HeapSize
GetStdHandle
SetHandleCount
ExitProcess
VirtualFree
HeapCreate
HeapDestroy
SetLastError
TlsFree
TlsSetValue
Sleep
TlsAlloc
TlsGetValue
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetCPInfo
GetProcessHeap
GetCommandLineA
GetCurrentThreadId
HeapReAlloc
GetSystemInfo
VirtualAlloc
RtlUnwind
GetSystemTimeAsFileTime
IsDebuggerPresent
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
UnregisterClassA
CharNextA
CharLowerA
wsprintfA
CharUpperW
CharUpperA
GetDC
GetClassLongA
GetCursor
IsWindowVisible
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegSetValueExA
RegCloseKey
GetUserNameA
SHGetSpecialFolderPathA
ShellExecuteExA
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysAllocStringLen
SysStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ