DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
289167214c360d8a59e3d62bfc12a7a6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
289167214c360d8a59e3d62bfc12a7a6_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
289167214c360d8a59e3d62bfc12a7a6_JaffaCakes118
Size
160KB
MD5
289167214c360d8a59e3d62bfc12a7a6
SHA1
37fdb63ea86df147f7cfc0724231162d83c4f0ea
SHA256
b457faa58fc4f4db1f89703cfefb7f3ce79c205cd0dd34a2cd70ce1901277239
SHA512
c7b20586507ca05f20cd1149e69f64cd1908ce0ba1d56438afec6785f3408e2e1fe22c45d6704c6c0a8ce908bbd77c09e7ed4d963a1070deff01ebdff6be5069
SSDEEP
3072:ZaJRsOOd9IbudsGfxiYh1fwtzLgKMP7ToxcmFWLoM1sUXPy:SSI6FKBxcMS1sSy
Checks for missing Authenticode signature.
resource |
---|
289167214c360d8a59e3d62bfc12a7a6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TranslateMessage
SetTimer
SystemParametersInfoA
SetWindowPos
KillTimer
GetMessageA
ShowWindow
CreateWindowExA
wsprintfA
DefWindowProcA
DispatchMessageA
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
RegisterClassExA
RaiseException
GetOEMCP
GetACP
ReadFile
SleepEx
GetModuleFileNameA
GetLocalTime
GetTickCount
LocalFree
CreateFileA
OpenProcess
GetCurrentProcessId
FreeLibrary
CreateRemoteThread
WriteProcessMemory
GetProcAddress
VirtualAllocEx
LoadLibraryA
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetSystemDirectoryA
WriteFile
GetFileAttributesA
GetFileType
TerminateProcess
GetCurrentProcess
CloseHandle
InterlockedDecrement
SetEndOfFile
SetFilePointer
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetStringTypeA
TlsGetValue
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
HeapAlloc
HeapFree
HeapReAlloc
SetLastError
InterlockedIncrement
GetLastError
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
GetCommandLineA
GetVersion
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetHandleCount
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
StrStrIA
CoInitialize
CoCreateGuid
CoCreateInstance
VariantInit
SysAllocString
GetErrorInfo
SHGetValueA
SHSetValueA
InternetCloseHandle
InternetOpenA
InternetSetOptionA
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
Netbios
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
UuidToStringA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ