CleanupPluginDLL
CreatePlugin
CreatePluginEx
DllRegisterServer
DllUnregisterServer
GHasAnyPlugins
GHasPlugin
InitializePluginDLL
PluginWndProc
Static task
static1
Behavioral task
behavioral1
Sample
166eb1ce3452c0b3f999e42c60ad3eb3_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
166eb1ce3452c0b3f999e42c60ad3eb3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
166eb1ce3452c0b3f999e42c60ad3eb3_JaffaCakes118
Size
376KB
MD5
166eb1ce3452c0b3f999e42c60ad3eb3
SHA1
827714a3f379550b0756080bfc9df2df4b037515
SHA256
5bd2573ecc609641a4a7b7f6f8c8849a3ba2bae450d8e7be2e018cf6622116cf
SHA512
fb909fc5028ac6cf324745b6b4b3dcf42f6d554a273572ae1d4b2b279b1e346f464152830d6c8d95c804615899ef5a7c69b397341bdf1fa5273ed930204c460b
SSDEEP
6144:SRONp/Ql+6BgZHYicsHBen9GFmTK9vIBCKJ1smqhTTn/OnC:+spYnW4nUkn9GFmTK9iCKJE8C
Checks for missing Authenticode signature.
resource |
---|
166eb1ce3452c0b3f999e42c60ad3eb3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
ReadFile
WriteFile
SetFilePointer
GetFileTime
SetFileTime
GetFileAttributesA
MoveFileA
DeleteFileA
SetFileAttributesA
GetFileSize
GetLastError
CreateDirectoryA
CompareFileTime
FindClose
FindNextFileA
FindFirstFileA
SearchPathA
ResetEvent
SetEvent
CreateMutexA
ReleaseMutex
CreateEventA
DebugBreak
HeapAlloc
GetProcessHeap
FreeLibrary
HeapFree
CreateThread
OpenProcess
GetVersionExA
LocalFree
CopyFileA
WaitForMultipleObjects
GetDriveTypeA
lstrcpynA
GlobalMemoryStatus
LockResource
SizeofResource
LoadResource
FindResourceA
SetLastError
GetCurrentProcess
CallNamedPipeA
GetEnvironmentVariableA
CreateFileMappingA
DuplicateHandle
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
ResumeThread
LoadLibraryExA
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
VirtualQuery
VirtualProtect
GetSystemInfo
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
GetModuleHandleA
CreateProcessA
GetCurrentProcessId
CompareStringA
GetTickCount
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GetShortPathNameA
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalDeleteAtom
GlobalAddAtomA
WideCharToMultiByte
lstrcmpA
lstrcmpiA
lstrcatA
lstrcpyA
lstrlenA
lstrlenW
HeapReAlloc
MultiByteToWideChar
BeginPaint
GetUpdateRect
SendMessageTimeoutA
GetFocus
GetWindowRgn
GetMenuItemRect
GetMenuItemCount
GetMenu
UnionRect
UpdateWindow
InvalidateRect
SetWindowsHookExA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
GetWindowThreadProcessId
CopyRect
SetWindowLongW
IsWindowUnicode
CallWindowProcA
CallWindowProcW
EnumThreadWindows
GetMenuItemInfoA
GetMenuStringA
GetSubMenu
EqualRect
GetKeyboardType
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
DestroyMenu
AppendMenuA
ModifyMenuA
CreatePopupMenu
RemoveMenu
TrackPopupMenuEx
ReleaseCapture
GetWindowLongW
EnumPropsExA
PostThreadMessageA
GetMessageA
EndPaint
ModifyMenuW
PostMessageW
SendMessageW
GetWindowTextW
DialogBoxParamA
DialogBoxIndirectParamA
EnableWindow
CreateWindowExA
SetWindowLongA
DefWindowProcA
GetSysColor
EnumWindows
EnumChildWindows
IntersectRect
GetWindowLongA
SetWindowRgn
OffsetRect
DrawFrameControl
GetWindowDC
GetKeyState
BringWindowToTop
CallNextHookEx
ShowWindow
MoveWindow
wsprintfA
GetClientRect
GetDlgItem
GetClassNameA
GetWindow
GetParent
KillTimer
SetTimer
GetDesktopWindow
InflateRect
SetActiveWindow
SetFocus
RemovePropA
SendMessageA
SetPropA
GetActiveWindow
IsWindow
DestroyWindow
UnregisterClassA
GetClassInfoA
LoadCursorA
AppendMenuW
RegisterClassA
PostMessageA
SetRectEmpty
IsIconic
SetRect
IsRectEmpty
IsWindowVisible
PtInRect
MapWindowPoints
ChildWindowFromPointEx
GetPropA
GetWindowRect
GetSystemMetrics
GetWindowTextLengthA
GetWindowTextA
SystemParametersInfoA
GetDC
ReleaseDC
RegisterWindowMessageA
SetWindowPos
DeleteObject
OffsetWindowOrgEx
SetWindowOrgEx
BitBlt
GetDeviceCaps
GetPixel
SetPixel
CreateRoundRectRgn
CombineRgn
CreateRectRgn
SetBkColor
ExtTextOutA
CreateRectRgnIndirect
EqualRgn
ExcludeClipRect
CreateFontIndirectA
SetMapMode
SelectObject
GetTextExtentPoint32A
RegSetValueExA
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegFlushKey
RegCreateKeyExA
RegDeleteValueA
CloseServiceHandle
QueryServiceStatus
OpenServiceA
OpenSCManagerA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteExA
ShellExecuteA
SHGetSpecialFolderLocation
OleInitialize
StringFromGUID2
CoGetClassObject
OleUninitialize
CoCreateInstance
VariantChangeType
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantClear
VariantCopy
LoadRegTypeLi
VariantInit
SysFreeString
SysAllocString
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
DispGetIDsOfNames
DispInvoke
RegisterTypeLi
LoadTypeLi
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
CleanupPluginDLL
CreatePlugin
CreatePluginEx
DllRegisterServer
DllUnregisterServer
GHasAnyPlugins
GHasPlugin
InitializePluginDLL
PluginWndProc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ