DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
20ca38ce919265cfbfa938e053e39549_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
20ca38ce919265cfbfa938e053e39549_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
20ca38ce919265cfbfa938e053e39549_JaffaCakes118
Size
169KB
MD5
20ca38ce919265cfbfa938e053e39549
SHA1
4ea5f938315b5367a2262d5775a2037dcb960db3
SHA256
1a2f570e0241a5df3a092be11a2402ed1895fb0e189109cdc0258c8ee62dfbf1
SHA512
d2df60969f6680972704da3b4cc164a56c0861deb0f58db4db423c763ce8b18ccc73bcb8637930aa3ca87adfb7db853d42afe98eedf4431a4128da87d9c066d4
SSDEEP
3072:SL5Cdp3QRz31QfYPSpwtGotouutR72tZO0xpKt/O3rMMKCd2BKFDi:S1CdpIPDGcFeIZO0xpKt/O3o3A2B
Checks for missing Authenticode signature.
resource |
---|
20ca38ce919265cfbfa938e053e39549_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetThreadLocale
GetThreadLocale
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
lstrcmpiW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryA
IsValidCodePage
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
CreateFileA
lstrlenW
GetVersionExA
lstrlenA
GetTickCount
GetProcAddress
CloseHandle
InterlockedExchange
GetACP
GetLocaleInfoA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
VirtualFree
VirtualAlloc
HeapCreate
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
VirtualQuery
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
UnregisterClassA
CharNextW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
RegisterTypeLi
SysFreeString
SysAllocString
LoadTypeLi
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
SafeArrayUnaccessData
VariantClear
SysAllocStringLen
VariantChangeType
VarUI4FromStr
UnRegisterTypeLi
SysStringLen
Utf8ToUtf16
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ