DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ed02efebb3a332b53be4322b3bdc2cf0_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ed02efebb3a332b53be4322b3bdc2cf0_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ed02efebb3a332b53be4322b3bdc2cf0_JaffaCakes118
Size
128KB
MD5
ed02efebb3a332b53be4322b3bdc2cf0
SHA1
82914bd18110fb69a14256562f9d9591aa7d470f
SHA256
0f3d7aaa2ab0126a98d42def968516d2d10b5e1570c534a7e9c55de2a5e8bc77
SHA512
c736796364ccdea4abbb39db2bdcc7d07678eeaaddcc380bfac164edc91fc2b0c83f99206bf1c5f637cb1e8d6e164710b3cab49cd32ff2774b885621b76baeac
SSDEEP
1536:bzrHEc3ThDsZvH4TuiNSXXNTXI8nL2cNPTWsGrA0t:PIcRsYgXXF/N/WA0t
Checks for missing Authenticode signature.
resource |
---|
ed02efebb3a332b53be4322b3bdc2cf0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
wsprintfA
GlobalSize
WideCharToMultiByte
MultiByteToWideChar
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetUserDefaultLCID
FormatMessageA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
FlushFileBuffers
CloseHandle
Sleep
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
GetACP
GetCPInfo
RtlUnwind
VirtualAlloc
RaiseException
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
GetOEMCP
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
GetCommandLineA
GetVersion
InterlockedDecrement
InterlockedIncrement
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextA
CryptGetHashParam
StringFromCLSID
CoUninitialize
OleRun
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoInitialize
VariantChangeType
VariantInit
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElemsize
SysFreeString
VarR8FromCy
VarR8FromBool
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayCreate
SysAllocString
VariantClear
SafeArrayDestroy
DispInvoke
LoadRegTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ