DllCanUnloadNow
DllGetClassObject
DllPreinstall
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
21b4a79639141c9884c2a204079221e4_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21b4a79639141c9884c2a204079221e4_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
21b4a79639141c9884c2a204079221e4_JaffaCakes118
Size
379KB
MD5
21b4a79639141c9884c2a204079221e4
SHA1
f99b103745b7dc60fec4f1e6aaede37bc4742b7c
SHA256
5a3282e5524efc40cded3c07f495d5888ca7c4560f891ed2025ef065c5f063c1
SHA512
6af629cb5b0645fe6143c85c24587dbba562f8228ed69ee85fc24301accf056ea838c1e3770b64653dbb8ad4df1c548764979217752daa5eeace6bd0bb866d8b
SSDEEP
6144:z6ykkJ/QPxaUrLYBQBPhnfZr+aEWwfGgcWCDf4UICNMnIGRByM6zB2:zkkhQMUrLYB2Tr+R7fGRWCDZICN0In
Checks for missing Authenticode signature.
resource |
---|
21b4a79639141c9884c2a204079221e4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrCmpIW
SHDeleteKeyW
UrlEscapeW
PathStripPathW
StrStrIW
LoadLibraryA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
GetSystemTime
CreateEventW
ExitThread
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
GetProcAddress
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
CreateFileA
FlushFileBuffers
LCMapStringA
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleFileNameA
GetStdHandle
WriteFile
GetModuleHandleA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
GetLastError
HeapFree
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
CharLowerW
GetClassNameW
CharUpperW
CallWindowProcW
GetWindowTextW
RealGetWindowClassW
EnumChildWindows
ClientToScreen
InflateRect
IntersectRect
OffsetRect
SetWindowTextW
SendMessageW
PostMessageW
SetActiveWindow
RemovePropW
GetPropW
SetPropW
GetWindowThreadProcessId
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
DispatchMessageW
SetWindowLongW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyW
SetSecurityInfo
CoInitializeEx
CoTaskMemFree
CoUninitialize
CoCreateInstance
VariantCopy
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreateVector
VariantChangeType
VariantClear
VariantInit
SysStringLen
SysAllocString
SysFreeString
SysAllocStringLen
DllCanUnloadNow
DllGetClassObject
DllPreinstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ