DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
29967c82f8c0a76fa7a9b15c5c63fd73_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29967c82f8c0a76fa7a9b15c5c63fd73_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29967c82f8c0a76fa7a9b15c5c63fd73_JaffaCakes118
Size
113KB
MD5
29967c82f8c0a76fa7a9b15c5c63fd73
SHA1
0d2f25f25b05b226ec939a84ad5f9cd3dd49acbf
SHA256
04fc09be4db2a0350a3a74a3469dc2b34c999a99efcec1449a8ef0f4809cf3d6
SHA512
0b821ddccdedae3409af605ee89198dbd869314700bbae67ceb8a4887403c5b5fa66bb38282d45745d5a37060c83ed1f03426bf53f69c775704ed2b71d74571e
SSDEEP
1536:4W79IQePGIyKYCWgPIGlJGZRv4MJ6z6uA9Fxf3pfLrjzpm03kY6rH1VMlxu+29yM:ZJ+HwggGjcRNhuqZpX+9rwlxTcfmdRC
Checks for missing Authenticode signature.
resource |
---|
29967c82f8c0a76fa7a9b15c5c63fd73_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
OpenProcessToken
FreeSid
AllocateAndInitializeSid
InitiateSystemShutdownW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegCreateKeyW
RegEnumValueW
GetCommandLineW
CloseHandle
CreateFileW
lstrlenW
GetWindowsDirectoryW
WritePrivateProfileSectionW
CompareStringW
GetPrivateProfileSectionW
lstrcmpW
GetLastError
GetCurrentProcess
lstrcmpiW
GetModuleHandleW
FindNextFileW
FindFirstFileW
SetFileAttributesW
WritePrivateProfileStringW
GetPrivateProfileIntW
LoadLibraryExA
GetModuleHandleA
GetPrivateProfileStringW
LocalFree
LoadLibraryW
GetSystemDirectoryW
ExpandEnvironmentStringsW
lstrlenA
GetWindowsDirectoryA
CopyFileW
ReleaseMutex
WaitForSingleObject
CreateMutexW
HeapAlloc
HeapFree
GetProcessHeap
GetSystemInfo
GetCurrentProcessId
GetCurrentDirectoryW
GetProcAddress
FreeLibrary
LoadLibraryExW
FindClose
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
RtlUnwind
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetFileType
GetVersionExW
SetCurrentDirectoryW
CreateDirectoryW
WideCharToMultiByte
LocalAlloc
InterlockedIncrement
LoadLibraryA
InterlockedDecrement
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
SzToWzWithAlloc
CmRealloc
GetOSVersion
GetOSMajorVersion
CmMalloc
CmFree
WzToSzWithAlloc
CoInitialize
CoUninitialize
SHGetPathFromIDListW
SHGetMalloc
SHChangeNotify
SHGetFolderPathW
SHFileOperationW
SHGetDesktopFolder
ShellExecuteExW
SHGetSpecialFolderLocation
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ