DllCanUnloadNow
DllGetClassObject
_DllEntryPoint@12
Static task
static1
Behavioral task
behavioral1
Sample
176223224e1401f02255fc1fa64ffe0d_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
176223224e1401f02255fc1fa64ffe0d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
176223224e1401f02255fc1fa64ffe0d_JaffaCakes118
Size
135KB
MD5
176223224e1401f02255fc1fa64ffe0d
SHA1
7a221d0123e4381ef14887d12420c5f22d76d7bd
SHA256
333f478a6cfe2e3a0efb9c54525b1b4b0974c44240358f77d7bbd93090b40448
SHA512
a078487fa0a2967212c2d1ad66d8ae134ff0c1e12872d5a4bde4ee3977f6f9e138fcc1b8a8607dc073125fb5c088fca62ffd50dad41503ccda3f75df32b05d4b
SSDEEP
3072:Zn9x9+mt7KxAsij9ub727FBRMih2OzHJPy5TO:XJt6Asz727bD7JPQO
Checks for missing Authenticode signature.
resource |
---|
176223224e1401f02255fc1fa64ffe0d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
sprintf
_snprintf
strrchr
_vsnprintf
swprintf
_ftol
wcscmp
wcsstr
wcscat
wcsrchr
memmove
realloc
wcscpy
wcslen
free
??2@YAPAXI@Z
??3@YAXPAX@Z
FreeSid
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExA
RegSetValueExA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegQueryValueExW
RegQueryValueExA
RegCloseKey
DeleteObject
GetDIBits
GetObjectW
FormatMessageA
GetCurrentThreadId
DebugBreak
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
lstrcpyA
OutputDebugStringW
lstrcpyW
CompareStringW
LocalFree
LocalAlloc
CreateDirectoryW
GetFileAttributesW
GetLastError
GetSystemDirectoryW
FileTimeToSystemTime
FileTimeToLocalFileTime
CloseHandle
Sleep
ReadFile
CreateFileW
DeleteFileW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetLocalTime
HeapFree
WriteFile
ReleaseMutex
SetFilePointerEx
CreateMutexA
HeapAlloc
GetProcessHeap
lstrcatA
GetModuleFileNameA
lstrcpynA
OutputDebugStringA
WaitForSingleObject
ExpandEnvironmentStringsA
CreateFileA
FlushFileBuffers
wsprintfW
GetDC
LoadImageW
LoadStringW
SysAllocString
SysFreeString
CoCreateInstance
CLSIDFromString
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
wiasWritePropStr
wiasReadPropGuid
wiasWriteMultiple
wiasFreePropContext
wiasGetItemType
wiasFormatArgs
wiasUpdateValidFormat
wiasCreatePropContext
wiasValidateItemProperties
wiasCreateDrvItem
wiasWritePropLong
wiasSetItemPropAttribs
wiasSetItemPropNames
wiasWriteBufToFile
wiasGetDrvItem
wiasQueueEvent
GdipLoadImageFromStream
GdiplusShutdown
GdipCloneImage
GdipLoadImageFromStreamICM
GdipAlloc
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipSaveImageToStream
GdipGetImageType
GdipGetImageDimension
GdipGetImagePixelFormat
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipFree
GdipDisposeImage
GdiplusStartup
GdipGetImageThumbnail
DllCanUnloadNow
DllGetClassObject
_DllEntryPoint@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ