DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
255352a702014785b91118e3a7f86f7f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
255352a702014785b91118e3a7f86f7f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
255352a702014785b91118e3a7f86f7f_JaffaCakes118
Size
332KB
MD5
255352a702014785b91118e3a7f86f7f
SHA1
af3aa375093340021c1497792e238680a9c3f9ba
SHA256
f3f348c8d0030d72f5e0b5b1816c612f4672684e22bd7b073cb166921f7b98bd
SHA512
c57dc28bfe63af62107ab0efafa5a9cd582a964c627eb6e509e0600fe27b8fe88a1a0788a5a7bca6c272a5770ee094373ef7f49fcf68f96692117dc73509dbd2
SSDEEP
6144:IzVq1ZqLoRrI3Qht9+y9WLYf74ohnQ9kHs:IzIvqrYhlfMqQ9kHs
Checks for missing Authenticode signature.
resource |
---|
255352a702014785b91118e3a7f86f7f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UnregisterClassA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
GetActiveWindow
GetSystemMetrics
SetForegroundWindow
SetActiveWindow
SetTimer
KillTimer
wsprintfA
CreateAcceleratorTableA
IsWindow
GetDesktopWindow
SetFocus
CharNextA
GetWindow
DestroyAcceleratorTable
BeginPaint
EndPaint
CallWindowProcA
FillRect
ReleaseCapture
GetClassNameA
GetDlgItem
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
GetClientRect
SetWindowPos
MoveWindow
GetSysColor
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
DefWindowProcA
SendMessageA
ShowWindow
DestroyWindow
CreateWindowExA
GetWindowLongA
SetWindowLongA
GetFocus
GetConsoleMode
GetConsoleCP
HeapSize
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
ExitProcess
HeapCreate
HeapDestroy
GetCommandLineA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetSystemTimeAsFileTime
RtlUnwind
VirtualQuery
GetSystemInfo
HeapReAlloc
IsDebuggerPresent
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
lstrcmpiA
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetFullPathNameA
EnterCriticalSection
LeaveCriticalSection
CreateThread
Sleep
WaitForSingleObject
GetCurrentProcessId
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
FlushInstructionCache
GetCurrentProcess
lstrcmpA
MulDiv
SetLastError
VirtualProtect
LockResource
GetProcessId
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
SetThreadLocale
GetThreadLocale
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateProcessA
DeleteFileA
GetTempPathA
VirtualAlloc
IsBadReadPtr
VirtualFree
HeapAlloc
GetProcessHeap
GetCurrentDirectoryA
SetStdHandle
GetFileType
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
QueryPerformanceCounter
GetTickCount
GetStringTypeA
GetStringTypeW
GetModuleFileNameA
HeapFree
InterlockedCompareExchange
GetVersionExA
GetLocaleInfoA
GetACP
InterlockedExchange
LocalFree
GetStockObject
GetObjectA
CreateSolidBrush
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
DeleteObject
BitBlt
CLSIDFromString
CLSIDFromProgID
OleLockRunning
StringFromGUID2
CoInitialize
CoUninitialize
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoGetClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
LoadRegTypeLi
LoadTypeLi
SysAllocString
SysStringByteLen
OleCreateFontIndirect
UnRegisterTypeLi
RegisterTypeLi
SysAllocStringByteLen
SysStringLen
DispCallFunc
VariantClear
VariantInit
VarUI4FromStr
SysAllocStringLen
SysFreeString
StrStrIA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ