DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0c5c8fbef5ba09e9bfdba67bfb2dbfa4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c5c8fbef5ba09e9bfdba67bfb2dbfa4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0c5c8fbef5ba09e9bfdba67bfb2dbfa4_JaffaCakes118
Size
194KB
MD5
0c5c8fbef5ba09e9bfdba67bfb2dbfa4
SHA1
20a82b7a600c12ac200aabe8a0f9822056a86e9a
SHA256
a708acdaa1cf229beaca220ff1be280a7d5a69949167ee28e9769dab05d65cc7
SHA512
29751c47a5436871108825b0a6b433b1857925b7ed3c7bb504b225341d7a2cb826e1dd9c7fc4805125019d3c2bd260e53cd1e1904fe70ebd6051dfcc1549f821
SSDEEP
6144:OjlYEWL3Z6OnaV90ZO888888888888W88888888888:OGPVaVeO888888888888W88888888888
Checks for missing Authenticode signature.
resource |
---|
0c5c8fbef5ba09e9bfdba67bfb2dbfa4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
SysReAllocStringLen
SysAllocStringLen
CreateErrorInfo
GetErrorInfo
SetErrorInfo
DispGetIDsOfNames
RegisterTypeLib
LoadTypeLibEx
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysFreeString
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
UpdateWindow
ShowWindow
SetWindowPos
SendMessageW
ReleaseDC
PostThreadMessageW
PostQuitMessage
MessageBoxW
MessageBeep
LoadStringW
InvalidateRect
GetWindowRect
GetSystemMetrics
GetSysColor
GetMessageW
GetDC
GetClientRect
FillRect
EndPaint
DispatchMessageW
CharUpperBuffW
CharToOemW
BeginPaint
wvsprintfW
SendMessageW
RegisterClassExW
MessageBoxW
LoadIconW
LoadCursorW
DrawTextExW
DefWindowProcW
CreateWindowExW
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrlenA
WriteFile
WaitForSingleObject
VirtualQuery
SignalObjectAndWait
SetEvent
SetErrorMode
ResetEvent
MultiByteToWideChar
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GetVersionExW
GetThreadLocale
GetStdHandle
GetShortPathNameW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCPInfo
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindFirstFileW
FindClose
ExpandEnvironmentStringsA
ExitProcess
EnumCalendarInfoA
EnterCriticalSection
DeleteCriticalSection
CreateProcessW
CreateEventW
CompareStringW
CloseHandle
Sleep
LoadLibraryW
GetVersionExW
GetModuleHandleW
GetModuleFileNameW
GetFileAttributesW
FindResourceW
SetTextColor
SetROP2
SetBkMode
SetBkColor
SelectObject
MoveToEx
LineTo
GetStockObject
DeleteObject
DeleteDC
CreateSolidBrush
CreatePenIndirect
CreateBrushIndirect
CreateFontIndirectW
IsEqualGUID
CoTaskMemFree
StringFromCLSID
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
CoInitialize
IsEqualGUID
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ