DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2560b416b1243339dbfb95ce69df7696_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2560b416b1243339dbfb95ce69df7696_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2560b416b1243339dbfb95ce69df7696_JaffaCakes118
Size
148KB
MD5
2560b416b1243339dbfb95ce69df7696
SHA1
d9f870fa07747960c122806fad7c3328a543a16f
SHA256
883e1066ad8fc5ad8cea09216d9a45cdf889c08ec0f739aa93a5fe67ccb26364
SHA512
e1105823ae2d36054449a80cf2c45be0af412d71ca90cc2369806c4bfa1b4860d6ab48aaa47ceb9fbf49aa85b862a9bec1e997385bf160cdc43f7f6423334e77
SSDEEP
1536:WED4E06zLpwr8M1pcbrHM0fwhqCoQE/TTzzfCIUXTo8uFQ2no5++zMOomVd:ZDL06Rs8M1pursifHmQS2no5++lXV
Checks for missing Authenticode signature.
resource |
---|
2560b416b1243339dbfb95ce69df7696_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapDestroy
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
LeaveCriticalSection
SizeofResource
LoadResource
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
FlushInstructionCache
EnterCriticalSection
GetShortPathNameA
Process32Next
Process32First
CreateToolhelp32Snapshot
SetEvent
WriteFile
CreateFileA
GetSystemTime
DeleteFileA
LocalFree
SetEnvironmentVariableA
CompareStringW
CompareStringA
FreeLibrary
WideCharToMultiByte
InitializeCriticalSection
MultiByteToWideChar
lstrlenW
DisableThreadLibraryCalls
lstrlenA
CopyFileA
GetCurrentProcess
CloseHandle
SetEndOfFile
GetFileType
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetVersion
SetHandleCount
SetUnhandledExceptionFilter
GetStdHandle
ReadFile
HeapSize
SetFilePointer
GetModuleFileNameA
GetCurrentThreadId
IsBadWritePtr
VirtualAlloc
TerminateProcess
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
RtlUnwind
GetTimeZoneInformation
GetLocalTime
HeapFree
HeapAlloc
HeapReAlloc
CreateDirectoryA
RaiseException
GetCPInfo
HeapCreate
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
GetVersionExA
VirtualFree
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetModuleHandleA
GetEnvironmentVariableA
SetWindowTextA
LoadStringA
GetWindowTextA
CharNextA
FindWindowExA
RegQueryValueExA
RegEnumValueA
RegEnumKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
OleRun
DispCallFunc
SysStringByteLen
LoadRegTypeLi
SysAllocStringByteLen
VariantInit
LoadTypeLi
VariantClear
RegisterTypeLi
VarUI4FromStr
SysAllocString
SysFreeString
SysStringLen
GetErrorInfo
InternetReadFile
InternetCloseHandle
HttpQueryInfoA
InternetOpenA
InternetOpenUrlA
PathFileExistsA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ