DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
176254510bcfefaa8dcd1e00126316a2_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
176254510bcfefaa8dcd1e00126316a2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
176254510bcfefaa8dcd1e00126316a2_JaffaCakes118
Size
2.5MB
MD5
176254510bcfefaa8dcd1e00126316a2
SHA1
e2a1f43512a518bcb28c4f32803060062a7edd10
SHA256
0abcaf4b5ace8636f6f5697d09da5fdf404ccfe6ddde6445203269532332d426
SHA512
0202a5dbbdd771601a61dc66f6e3f2abb5c8fa8b7533916e5660eda3f9221f8db0ce82350ce5918149f89dbb756f1dc0221f1a295d2167106a8500334032c064
SSDEEP
49152:QeyaxRYQx77VbdbFw4x0zAphH6gvlWKPlMRJbFxcbq8yVVOLJTlqoSmHxtN:/xRlxNw49CgvlWKdMRJJl1VOLJZ3HjN
Checks for missing Authenticode signature.
resource |
---|
176254510bcfefaa8dcd1e00126316a2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateNamedPipeA
SetCurrentDirectoryA
GetLocalTime
WaitForSingleObjectEx
lstrcatW
GetTempPathW
GetStringTypeW
GetStringTypeA
SetFileApisToOEM
GetAtomNameW
GlobalDeleteAtom
OpenProcess
SetHandleCount
CancelIo
UnlockFileEx
GetComputerNameA
WriteProcessMemory
MapViewOfFileEx
CreateMutexA
IsWow64Process
GetThreadContext
IsDBCSLeadByteEx
HeapAlloc
GetFileAttributesW
lstrlenA
ConvertDefaultLocale
GetTimeFormatW
UnregisterWait
SetCurrentDirectoryW
LockResource
RemoveDirectoryA
GetWindowsDirectoryW
FatalAppExitA
FindVolumeMountPointClose
GetShortPathNameW
SetLocalTime
LocalUnlock
GlobalFindAtomA
GetCalendarInfoW
LoadLibraryA
DnsHostnameToComputerNameW
LCMapStringW
OpenThread
ExpandEnvironmentStringsA
LockFileEx
GetProcAddress
CreateToolhelp32Snapshot
OleCreateFromData
CoQueryProxyBlanket
BindMoniker
CreateOleAdviseHolder
CoCreateInstanceEx
CreateBindCtx
OleLoadFromStream
CoMarshalInterface
CoSwitchCallContext
MessageBoxIndirectW
InvertRect
GetClassInfoW
SetActiveWindow
RemovePropW
CharLowerA
RemoveMenu
SetRect
SetForegroundWindow
GetSysColor
LoadIconA
MsgWaitForMultipleObjects
SetDlgItemInt
SendInput
CopyAcceleratorTableW
GetWindowThreadProcessId
LoadImageW
CharLowerBuffW
GetCaretBlinkTime
GetComboBoxInfo
FillRect
WaitForInputIdle
CreateIconFromResourceEx
GetScrollInfo
GetParent
CharPrevA
CharNextW
GetClassLongW
CharNextA
GetCursor
OemToCharBuffA
SendMessageW
DrawIconEx
TrackPopupMenuEx
GetDlgItemTextW
StrChrW
PathAppendA
StrStrIW
StrCatBuffW
SHRegGetUSValueW
PathUnquoteSpacesW
PathCanonicalizeW
PathCombineW
wnsprintfA
StrTrimW
StrDupW
PathRenameExtensionW
RegQueryInfoKeyA
RegisterServiceCtrlHandlerExW
RegDeleteValueA
RegisterEventSourceW
RevertToSelf
QueryServiceConfigA
SaferGetPolicyInformation
SaferCloseLevel
DeregisterEventSource
QueryServiceStatus
SHAppBarMessage
SHBrowseForFolderW
SetWindowExtEx
GetFontResourceInfoW
BitBlt
CreateEnhMetaFileA
BeginPath
RectVisible
GetCharABCWidthsA
CloseFigure
SetTextColor
GetBkMode
CopyEnhMetaFileA
CreateMetaFileA
CreateScalableFontResourceA
CreateBitmapIndirect
PolylineTo
PolyPolyline
SetBrushOrgEx
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ