DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
089b26739c873432a51f763d8faf36a0_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
089b26739c873432a51f763d8faf36a0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
089b26739c873432a51f763d8faf36a0_JaffaCakes118
Size
2.0MB
MD5
089b26739c873432a51f763d8faf36a0
SHA1
c5d609a30429ec865440f53f0c8971a59fc65854
SHA256
bae48cf0bcc250e917a5fa927784bc1f753f6ddf575c998771c4752087fc5d15
SHA512
d53b43684ded8581c31cbc3ce5e6edd3b41ac39ab7249de095b687f87af7161d8cf5859696691931884290a5d131954447459210fa513f7b5aba9e38b44cb833
SSDEEP
49152:nuyGZZhJc3x1BzTA7l0sc/ssr2eKl/2qt4ZBDaugs+jm:vGrhy3x1Bz7/muqt4XWuji
Checks for missing Authenticode signature.
resource |
---|
089b26739c873432a51f763d8faf36a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLocaleInfoW
CreateEventW
SwitchToThread
GetTapeParameters
GetSystemDirectoryA
MoveFileW
GetProfileStringW
SetTimeZoneInformation
FindResourceExA
lstrcatA
SetStdHandle
CreateDirectoryW
GetFileSize
GetCalendarInfoW
AddAtomW
DeleteTimerQueue
GetProcAddress
OpenFileMappingW
FindVolumeClose
lstrcpyW
EnumUILanguagesW
CopyFileExW
LoadLibraryA
SetupComm
OleDraw
CoFreeUnusedLibraries
CreateItemMoniker
CreateOleAdviseHolder
OleCreateLink
StringFromIID
OleLoad
PropVariantCopy
DestroyMenu
LockWindowUpdate
GetMenuState
AllowSetForegroundWindow
CreateAcceleratorTableW
GetGUIThreadInfo
IntersectRect
NotifyWinEvent
SetWindowPos
DrawAnimatedRects
MapVirtualKeyA
DestroyIcon
InternalGetWindowText
PathGetCharTypeA
PathQuoteSpacesW
StrToIntA
StrNCatW
EnumServicesStatusW
RegDeleteValueA
RegisterEventSourceA
InitiateSystemShutdownExW
BuildTrusteeWithNameW
GetNumberOfEventLogRecords
SetMagicColors
CreateDCA
AddFontResourceA
SetWindowOrgEx
SelectObject
PaintRgn
ExtFloodFill
CreateHalftonePalette
ScaleWindowExtEx
GetEnhMetaFileBits
CreateScalableFontResourceA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ