DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
191218f5677507c04dfaf0c4e8bbc6a0_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
191218f5677507c04dfaf0c4e8bbc6a0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
191218f5677507c04dfaf0c4e8bbc6a0_JaffaCakes118
Size
156KB
MD5
191218f5677507c04dfaf0c4e8bbc6a0
SHA1
e2e189281402c9cdff4f16660fd7ea849d6fcdeb
SHA256
e65543152e1b0f40adbc5bd87c8458002b8f21df60aaf4e1371642e131fd740a
SHA512
dbae8f6a32663a71cc657fb67da0ef338110cf9fa9734daa6c27a676ccf1b32e70b581891fc21442c434fd2c7d00edd871209ef597e4e1da0c963ed373bde0de
SSDEEP
3072:8gLmBbZEQe5DCD+Xx/rl/yddoCrMGivPMOW/O95oHJhlDU:w9AVIsvqFJh
Checks for missing Authenticode signature.
resource |
---|
191218f5677507c04dfaf0c4e8bbc6a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
KillTimer
SetTimer
wsprintfA
DispatchMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
EnumWindows
DefWindowProcA
GetMessageA
TranslateMessage
SystemParametersInfoA
SetWindowPos
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
GetOEMCP
GetACP
ReadFile
SetEndOfFile
SetFilePointer
FlushFileBuffers
GetLocalTime
FreeLibrary
CloseHandle
CreateRemoteThread
GetProcAddress
VirtualAllocEx
OpenProcess
LoadLibraryA
SleepEx
GetModuleFileNameA
CreateFileA
GetCurrentProcessId
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetSystemDirectoryA
GetTickCount
VirtualFree
VirtualAlloc
IsBadWritePtr
WriteFile
GetFileAttributesA
WriteProcessMemory
WideCharToMultiByte
SetStdHandle
IsBadCodePtr
IsBadReadPtr
HeapCreate
HeapDestroy
GetVersionExA
GetCPInfo
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetEnvironmentVariableA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
LocalFree
InterlockedDecrement
InterlockedIncrement
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
GetLastError
MultiByteToWideChar
GetCommandLineA
GetVersion
RaiseException
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
LCMapStringA
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetFileType
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
StrStrIA
CoCreateInstance
CoInitialize
CoCreateGuid
VariantInit
SysAllocString
GetErrorInfo
SHSetValueA
SHGetValueA
GetModuleBaseNameA
EnumProcesses
EnumProcessModules
InternetCloseHandle
InternetOpenA
InternetSetOptionA
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
Netbios
UuidToStringA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ