DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
29a27cbea35f94d4c5827dea90a060e9_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
29a27cbea35f94d4c5827dea90a060e9_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29a27cbea35f94d4c5827dea90a060e9_JaffaCakes118
Size
128KB
MD5
29a27cbea35f94d4c5827dea90a060e9
SHA1
cf16510db556e78b505f2cc1089b8ee59519649b
SHA256
60f3f7f088c727c00fa14461a8122c14700381e08b92a78bf4db86a40bb7f6d7
SHA512
8a2d6161b4301f06447e9cbcb82135de1363f545adaf5a599e7185625d842dc46f004e846114f5a64a90979d0629ff3b22d0805eb50f8a7bd9daead56f911741
SSDEEP
1536:VzY+bRViEOVYs/SOfIoAwT3OvQ7MUqT9PVCP3SjN/jjAwdWpUPwwdltKMuA29Osm:VzPbdGwo9T4UMUgTCWugWpkLlQp9sOl
Checks for missing Authenticode signature.
resource |
---|
29a27cbea35f94d4c5827dea90a060e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord823
ord825
RtlIpv4StringToAddressW
RtlIpv6StringToAddressW
RtlCompareMemory
ExpandEnvironmentStringsA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
GlobalFree
GlobalAlloc
lstrcmpiW
lstrcmpW
LoadLibraryA
GetModuleHandleA
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
InterlockedExchange
Sleep
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyExW
GetWindowLongW
IsDlgButtonChecked
CheckDlgButton
EnableWindow
DefWindowProcW
SendDlgItemMessageW
SetDlgItemInt
SetDlgItemTextW
PostMessageW
SetFocus
SetWindowLongW
GetDlgItemTextW
GetDlgItem
SendMessageW
GetDlgItemInt
GetParent
BringWindowToTop
LoadIconW
LoadStringW
RegisterClipboardFormatW
MessageBoxW
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
CreateStreamOnHGlobal
InternetCrackUrlW
InternetCanonicalizeUrlW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ