DllRegisterServer
DllUnregisterServer
PauseW
ResumeW
StartW
Static task
static1
Behavioral task
behavioral1
Sample
fa7c5c5d073f765e170c33d3f472bd89_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fa7c5c5d073f765e170c33d3f472bd89_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fa7c5c5d073f765e170c33d3f472bd89_JaffaCakes118
Size
130KB
MD5
fa7c5c5d073f765e170c33d3f472bd89
SHA1
4dbf0750981c73bb51067137e2e1c22b09691eb1
SHA256
f54a12f2281510f829df7bdc2535c1373be668a5e4c0e368da16043957514dd8
SHA512
9127b1aec51681a250260ba8d7d2ccb308a23485ca6dd2440848e227770f9a32b0dca55b16584da14a465e24eca0e8fa61f72da9e6493b4a41e550f1c0350c82
SSDEEP
3072:qQExXduy4mhu10Dy5gsNg5MzZtvkKpZYKA0WRO6E:+xX+mQSDy5gX5MzZSKpZYm
Checks for missing Authenticode signature.
resource |
---|
fa7c5c5d073f765e170c33d3f472bd89_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
HeapAlloc
GetProcessHeap
GetSystemTime
lstrcmpA
CreateMutexA
ExitProcess
GlobalAlloc
GetDateFormatA
GetCommandLineA
HeapFree
Sleep
VirtualAlloc
VirtualProtect
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
SetLastError
LeaveCriticalSection
TlsGetValue
TlsSetValue
FreeLibrary
GetProcAddress
LoadLibraryExW
LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetModuleHandleW
GetModuleHandleExW
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
GetLastError
EnterCriticalSection
RtlUnwindEx
SetMenu
GetMenuStringA
DrawMenuBar
CreateMenu
GetMenu
DestroyMenu
EnableMenuItem
AppendMenuA
DeleteMenu
InsertMenuItemA
CreatePopupMenu
RegisterClassA
GetKeyboardLayout
ActivateKeyboardLayout
MessageBoxA
LoadMenuA
GetOpenFileNameA
FindTextA
GetSaveFileNameA
DllRegisterServer
DllUnregisterServer
PauseW
ResumeW
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ