DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
14e91d5ceba5940f5dd19ad6005397c7_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
14e91d5ceba5940f5dd19ad6005397c7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
14e91d5ceba5940f5dd19ad6005397c7_JaffaCakes118
Size
167KB
MD5
14e91d5ceba5940f5dd19ad6005397c7
SHA1
73320aff79934d622e2a52357b3f2a122004e4fc
SHA256
9a2177b24316eace942c15a8eb4ec47c26c1709ccf444a77a77e1c200bc48e84
SHA512
5ae483759ddef51a33d8482c34d27e531ca2f87aec2b9b06713ff79afe62cef3a0f9b646ebe1f844f2ad1ceec639ae40d5e99013477dc2fc3ebcabe7de9973df
SSDEEP
3072:j8u4H61gbGBOxllZlKyvd0ZSu87Fuy2ak5af:Qu4HlMOJ310ZSp7FWabf
Checks for missing Authenticode signature.
resource |
---|
14e91d5ceba5940f5dd19ad6005397c7_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UuidToStringW
RpcStringFreeW
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
StrCmpIW
StrStrIW
PathStripPathW
UrlEscapeW
SHDeleteKeyW
ExitThread
WaitForSingleObject
CreateThread
Sleep
GetModuleFileNameW
OpenMutexW
GetSystemTime
CreateEventW
OpenProcess
CreateMutexW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpW
SystemTimeToFileTime
GetLocalTime
LocalFree
LoadLibraryA
FreeLibrary
ExpandEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetTempFileNameW
GetTickCount
GetEnvironmentVariableW
LocalAlloc
LoadLibraryW
GetVolumeInformationW
GetWindowsDirectoryW
GetSystemInfo
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
GetProcAddress
CreateProcessW
CloseHandle
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
VirtualQuery
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapSize
GetModuleHandleA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
RealGetWindowClassW
CallWindowProcW
SetWindowLongW
SetPropW
GetWindowThreadProcessId
EnumChildWindows
PostMessageW
SendMessageW
GetWindowTextW
RemovePropW
SetWindowTextW
OffsetRect
IntersectRect
SetActiveWindow
ClientToScreen
PeekMessageW
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageW
GetClassNameW
GetPropW
InflateRect
CryptGetHashParam
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityInfo
CryptGenRandom
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext
RegQueryValueExW
RegCreateKeyW
RegCreateKeyExW
RegSetValueW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
CoInitializeEx
CoCreateInstance
CoTaskMemFree
CoUninitialize
VariantCopy
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ