EnumCustomFunctionSettingRelease
EnumTvValueNext
FullViewE010
GetAvValueCount
GetDevSplineArrayEx
Static task
static1
Behavioral task
behavioral1
Sample
0fb90e48cc87ab9a2885f2a09c5a9a77_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0fb90e48cc87ab9a2885f2a09c5a9a77_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0fb90e48cc87ab9a2885f2a09c5a9a77_JaffaCakes118
Size
342KB
MD5
0fb90e48cc87ab9a2885f2a09c5a9a77
SHA1
aaa541c35591ec3aa629ee7c30eff790ceb651d5
SHA256
d126a44aa4b1ba70015e1edfe0273bbe64b1c70866f6a634e75e6a9004c88745
SHA512
28596d2945b72b46e8189390f99f3ac34912c203eb28c6850d52b3c36caf7b42d195a4aa7c389161904d6b23c16b668e70ad3d53c80408261a9bfa200285eed1
SSDEEP
6144:vrt6ruqIurILnENbIijb4ogUfu2OJ3dM1nHv5iwv549tfrIgvWY9hqeUSH3yL6QP:Mru8oxqB3vGswhhCmQlilZjmI++
Checks for missing Authenticode signature.
resource |
---|
0fb90e48cc87ab9a2885f2a09c5a9a77_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FlushFileBuffers
FormatMessageA
FormatMessageW
GetACP
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeThread
GetLastError
GetLocalTime
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GlobalAlloc
GlobalFree
HeapAlloc
HeapDestroy
DisableThreadLibraryCalls
HeapLock
HeapReAlloc
HeapUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LocalReAlloc
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteFile
DeleteTimerQueueTimer
DeleteCriticalSection
DebugBreak
HeapFree
CloseHandle
VariantInit
SysAllocString
VarBstrFromCy
VarCyFromI2
VarUI2FromUI4
VarI4FromI1
CoInitializeEx
CLSIDFromString
CoTaskMemFree
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
DeregisterEventSource
EnumCustomFunctionSettingRelease
EnumTvValueNext
FullViewE010
GetAvValueCount
GetDevSplineArrayEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ