DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
28de6b06deb427948749989594fa9bc7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28de6b06deb427948749989594fa9bc7_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28de6b06deb427948749989594fa9bc7_JaffaCakes118
Size
261KB
MD5
28de6b06deb427948749989594fa9bc7
SHA1
40f719dbd5ad9d8d45c685e5b2ab1fcb91dc73dd
SHA256
0d7c8a3d9ec13060ff3d4d138483dd65ce5f92891365bab08d0a1029cdd731dd
SHA512
6edfc76583ddf32475cfc07cbacd37862ef6100ad2e4a32b7e5cd8265288dffdeafdff60221eac847db0d097b7bbf3afc3c61d8091242e88390445610db38dc8
SSDEEP
6144:mZVn9gSsHxF8AERAalc4MqYmJJV0nbsHd9/+jrNX7wlfoMbZcVKV5V:YV4HEVe4M3mbV0nQH6jrylJlcVKV
Checks for missing Authenticode signature.
resource |
---|
28de6b06deb427948749989594fa9bc7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord823
ord825
RtlIpv4StringToAddressW
RtlIpv6StringToAddressW
RtlCompareMemory
ExpandEnvironmentStringsA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
GlobalFree
GlobalAlloc
lstrcmpiW
lstrcmpW
LoadLibraryA
GetModuleHandleA
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
InterlockedExchange
Sleep
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyExW
GetWindowLongW
IsDlgButtonChecked
CheckDlgButton
EnableWindow
DefWindowProcW
SendDlgItemMessageW
SetDlgItemInt
SetDlgItemTextW
PostMessageW
SetFocus
SetWindowLongW
GetDlgItemTextW
GetDlgItem
SendMessageW
GetDlgItemInt
GetParent
BringWindowToTop
LoadIconW
LoadStringW
RegisterClipboardFormatW
MessageBoxW
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
CreateStreamOnHGlobal
InternetCrackUrlW
InternetCanonicalizeUrlW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ