DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
UpxCompress_a
UpxDecompress_a
Static task
static1
Behavioral task
behavioral1
Sample
566aa6e576cbb104aa8f7e2d27aeff00_JaffaCakes118.dll
Resource
win7-20240903-en
Target
566aa6e576cbb104aa8f7e2d27aeff00_JaffaCakes118
Size
193KB
MD5
566aa6e576cbb104aa8f7e2d27aeff00
SHA1
936a026362c81d5466521afc9e27db7f8d65ab0e
SHA256
1a542e56f6cff0b4858f734e24b353a407408d417905b1141fa8c7a88449ffc5
SHA512
58fcb01cc757b7132408f5c2eba315dfd0fbfd89132d836544082d8df22945ddf249f088c2146f10f2ab9b64551fd856de2baa0ebcd2aeb0b8227be2ec9ebb8e
SSDEEP
1536:3y7tou9luzgD2P0bu480LBlnF3/IiHPxAVyKdP74tB8y4CMQeI01y/z:3y6wx2P0C480LB9Fie01y7
Checks for missing Authenticode signature.
resource |
---|
566aa6e576cbb104aa8f7e2d27aeff00_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
lstrcpynW
lstrcpyW
lstrcatW
GetLocalTime
Sleep
CreateFileA
GetTempPathA
FlushFileBuffers
WriteFile
DeleteFileA
DeviceIoControl
WideCharToMultiByte
GetCurrentProcessId
MultiByteToWideChar
GetModuleHandleA
GetCurrentProcess
DebugBreak
SetErrorMode
OpenEventA
ExitProcess
OutputDebugStringA
LoadLibraryA
GetWindowsDirectoryA
IsBadCodePtr
SetUnhandledExceptionFilter
RaiseException
LocalFree
lstrcmpiW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetShortPathNameW
lstrlenW
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
CreateThread
InitializeCriticalSection
DisableThreadLibraryCalls
CloseHandle
DeleteCriticalSection
HeapDestroy
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetProcAddress
CharNextW
wsprintfA
SetWindowLongW
MessageBoxW
CharLowerW
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
VariantClear
SysAllocStringLen
LoadRegTypeLi
SysStringLen
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
VarUI4FromStr
_onexit
_stricmp
_adjust_fdiv
_initterm
_strlwr
__dllonexit
?terminate@@YAXXZ
_except_handler3
strrchr
abort
atoi
wcscpy
strncpy
strchr
strstr
_wcsicmp
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
__CxxFrameHandler
free
malloc
realloc
wcslen
wcsstr
_wcslwr
sprintf
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
HttpQueryInfoA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
UpxCompress_a
UpxDecompress_a
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ