DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
53cd05a91f253d1adf850f20687dfed7_JaffaCakes118.dll
Resource
win7-20240903-en
Target
53cd05a91f253d1adf850f20687dfed7_JaffaCakes118
Size
212KB
MD5
53cd05a91f253d1adf850f20687dfed7
SHA1
3d66427e9229ec71e58767ce27934ac6ebc87db1
SHA256
dedf696958619294db271816219e408e5bbce11adabe7086b62aa224bedd6428
SHA512
5d751bf1893953be74ba5cc695b2024db0808aab211214a19d62eb3d5fb454839e415b5d92df467b9dcb0cb62efe01f9fe6eb77bd1c8b60e39bc7a2aefe39340
SSDEEP
3072:Q3RSA6fbS8xlk7zlViaSs9mVSLmLjpxlTgu9Rv9tFrQJIsJDC:QhPZlVFSPpx5/1raDC
Checks for missing Authenticode signature.
resource |
---|
53cd05a91f253d1adf850f20687dfed7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetFileAttributesW
GetVersion
LoadLibraryW
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
InterlockedDecrement
WideCharToMultiByte
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
lstrcmpiA
DisableThreadLibraryCalls
GetModuleFileNameA
LoadLibraryExA
InterlockedIncrement
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
CreateMutexA
lstrcpyA
CopyFileA
CreateProcessA
GetVersionExA
GetCurrentProcess
GetModuleHandleW
Sleep
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
DeleteFileA
LockResource
FreeResource
GetVolumeInformationA
GetCurrentDirectoryA
GlobalFree
GlobalAlloc
ExitProcess
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetFileSize
SetFilePointer
ReadFile
CreateFileA
WriteFile
CloseHandle
MultiByteToWideChar
GetSystemDirectoryA
GetLocalTime
GetConsoleMode
GetConsoleCP
LoadLibraryA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
VirtualFree
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
LCMapStringW
HeapCreate
HeapDestroy
GetProcessHeap
GetCommandLineA
GetSystemTimeAsFileTime
CreateThread
GetCurrentThreadId
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
RtlUnwind
HeapAlloc
LCMapStringA
GetOEMCP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapFree
LocalFree
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetStdHandle
GetWindowLongA
IsWindow
SetWindowLongA
GetClientRect
RegisterClassExA
EnumChildWindows
UnregisterClassA
DestroyWindow
SetTimer
KillTimer
DefWindowProcA
ShowWindow
SetForegroundWindow
GetForegroundWindow
CharNextA
GetDesktopWindow
wsprintfA
CreateWindowExA
PostMessageA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
OleInitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CLSIDFromString
CoUninitialize
CoCreateGuid
CoInitialize
OleSetContainedObject
CoGetClassObject
CoCreateInstance
SysAllocStringLen
VariantInit
VariantChangeType
VariantCopy
LoadRegTypeLi
VarUI4FromStr
SysStringLen
VariantClear
SysAllocString
SysFreeString
LoadTypeLi
SHDeleteKeyA
InternetCloseHandle
InternetReadFile
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
Netbios
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ