DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b42b45b2d48378f6087c31e54005c220_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b42b45b2d48378f6087c31e54005c220_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
b42b45b2d48378f6087c31e54005c220_JaffaCakes118
Size
480KB
MD5
b42b45b2d48378f6087c31e54005c220
SHA1
f02644cda31955d3433f8f74904eab2520327fc4
SHA256
304e0b6fb4b02a195976f6285a83a70c9bbcf12c545c2f8a1515a91a6d35740d
SHA512
546ee5b2526893d310565f7a0c268b5fa1a021fb915b13b61a581a3e5ea48aa9a0214d7719817347cc166aad711513955809d4be7f3fec09f6fd933ececf1db0
SSDEEP
6144:CQZq5253tE3AJScHa2+/mrX1Ed54G/cOMEqVLrMa03lTsbysbjvZwAOsHAtYB:Uy2mrX1hG/cOCNrMaYlTmbjRwEAO
Checks for missing Authenticode signature.
resource |
---|
b42b45b2d48378f6087c31e54005c220_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetEvent
GetModuleFileNameW
QueryPerformanceCounter
QueryPerformanceFrequency
CreateEventW
WaitForSingleObject
CloseHandle
ReleaseMutex
GetLastError
CreateMutexW
InterlockedDecrement
Sleep
InterlockedIncrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
CreateFileA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteConsoleW
GetFileType
GetStdHandle
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
RtlUnwind
HeapReAlloc
ExitThread
CreateThread
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
RaiseException
WriteFile
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
ExitProcess
LoadLibraryW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapSize
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
FlushFileBuffers
InterlockedExchange
InitializeCriticalSection
SetRectEmpty
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
CoWaitForMultipleHandles
CoTaskMemFree
CoTaskMemAlloc
OleRun
CoCreateInstance
StringFromGUID2
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SHDeleteKeyW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ