FreeGlobalObjects
GetContextSpellingSession
GetNextToken
RunCssWordBreaker
Static task
static1
Behavioral task
behavioral1
Sample
19ac59aadf328e03c5869ac26154f1df_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
19ac59aadf328e03c5869ac26154f1df_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
19ac59aadf328e03c5869ac26154f1df_JaffaCakes118
Size
301KB
MD5
19ac59aadf328e03c5869ac26154f1df
SHA1
c2f59c2d96beac86225024ffcd330039a2940a7e
SHA256
c24aebaf88f034a1bbfd613aff57184995928cf36f11f76a282966dca6fa0b0e
SHA512
1b3a2a5d94b6e13e9baefe65c27bc899d4d2b7567050108d4726b5ec9509fe381b8f7bb83947d5697bac22e0ff761c1c305df0dcb1a0cc5e2fa832fa4d8828a6
SSDEEP
6144:nMQDWcBoz1R/7/FKl5pJ1C8PPnkvGKjy2Zv/G/N14:qcBwnDQlh1C8kvTjy2Zv/814
Checks for missing Authenticode signature.
resource |
---|
19ac59aadf328e03c5869ac26154f1df_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHGetSettings
SHFormatDrive
SHFileOperationA
RpcSmAllocate
CoTaskMemFree
CoTaskMemAlloc
VerQueryValueW
CloseDesktop
CloseClipboard
GetMenuCheckMarkDimensions
CloseWindow
GetMonitorInfoA
GetSysColor
CloseWindowStation
GetDC
GetKeyboardLayout
CharNextA
GetKeyboardLayoutList
GetSystemMetrics
ReleaseDC
CharPrevA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetProcessTimes
GetShortPathNameA
GetStringTypeExW
GetSystemDefaultLCID
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempPathW
GetTickCount
GetTimeZoneInformation
DeleteFileW
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalMemoryStatus
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSize
HeapUnlock
InitializeCriticalSection
FreeLibrary
InterlockedExchange
IsDBCSLeadByte
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryW
SetFileAttributesW
SetLastError
SetLocalTime
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteFile
DeleteCriticalSection
CreateSemaphoreA
CreateMutexA
CreateFileW
CreateDirectoryW
CloseHandle
FormatMessageW
FindFirstFileW
FindClose
ExpandEnvironmentStringsW
InterlockedCompareExchange
EnterCriticalSection
GetUserDefaultLCID
GetTraceLoggerHandle
AddAccessDeniedAce
GetTraceEnableLevel
GetTokenInformation
GetSecurityDescriptorDacl
GetLengthSid
FreeSid
CopySid
UnregisterTraceGuids
TraceEvent
SetSecurityDescriptorDacl
RegisterTraceGuidsA
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
InitializeSecurityDescriptor
InitializeAcl
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidA
CheckTokenMembership
AllocateAndInitializeSid
AddAccessAllowedAce
StrChrA
PathFileExistsA
ChrCmpIA
StrCmpNA
DeleteObject
DeleteDC
CreateSolidBrush
CreateDCA
GetDeviceCaps
ord9
FreeGlobalObjects
GetContextSpellingSession
GetNextToken
RunCssWordBreaker
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ