DllAction
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2ec2017a55e93c5446680f47a0aaec8d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ec2017a55e93c5446680f47a0aaec8d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ec2017a55e93c5446680f47a0aaec8d_JaffaCakes118
Size
482KB
MD5
2ec2017a55e93c5446680f47a0aaec8d
SHA1
f16b4e1ca98b32e57b82fec82e290b3033034cc8
SHA256
c838e04922d891b0f7bc617bafe906cb0b870bf901dc93e1e7a5d09a242d0e4f
SHA512
5f59423d2d7c0971f3686d1c0017aec6779fd416ad64fdfeb53295f99aab8312b6210d6a6545057364195be3e615d5cca31e0b7a7217e6963659323b2b8cf24e
SSDEEP
12288:3tuG7Yb/k1lnr2s3kT/KBWOrzPcZgLBUsz:3tu6D2s3W/NOnPcZgLyy
Checks for missing Authenticode signature.
resource |
---|
2ec2017a55e93c5446680f47a0aaec8d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHDeleteValueW
SHGetValueW
FlushFileBuffers
GetProcAddress
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
AddAtomW
GlobalAddAtomW
LocalFree
DisconnectNamedPipe
SetSystemTimeAdjustment
HeapValidate
CreateMutexW
GetTempFileNameW
GetFileAttributesA
GetProcessPriorityBoost
SetUnhandledExceptionFilter
GetWindowsDirectoryW
CreateDirectoryExW
FindAtomW
GetCurrentDirectoryW
CreateFileW
HeapWalk
GetFileAttributesExA
OpenFileMappingA
GetOverlappedResult
GetExitCodeThread
FlushInstructionCache
GetCurrentDirectoryA
ReleaseSemaphore
GetTapeStatus
GetTapeParameters
WritePrivateProfileStringA
BeginUpdateResourceW
SetMessageWaitingIndicator
CreateEventW
DebugBreak
GetThreadPriority
GetAtomNameW
ResetEvent
ReadFileEx
GetSystemTimeAdjustment
GetComputerNameW
lstrcpynA
FileTimeToLocalFileTime
SetProcessAffinityMask
SetTapeParameters
LocalFlags
GetLogicalDriveStringsW
SetLocalTime
BeginUpdateResourceA
FreeLibraryAndExitThread
lstrcmpW
ExitThread
CreatePipe
FindCloseChangeNotification
GetFileAttributesW
UnmapViewOfFile
GetTempFileNameA
GetLogicalDriveStringsA
GetCommState
GetDevicePowerState
DuplicateHandle
ExpandEnvironmentStringsA
FatalAppExitW
SetStdHandle
GetProfileSectionW
GetProcessShutdownParameters
LoadLibraryExW
DeleteFileA
GetShortPathNameA
WinExec
GetPrivateProfileStringW
CallNamedPipeW
GetStartupInfoA
GetCurrentThreadId
GetVolumeInformationW
GlobalFindAtomW
GlobalFix
lstrlenW
GetModuleHandleW
GetTimeZoneInformation
IsBadHugeWritePtr
GetThreadSelectorEntry
FreeEnvironmentStringsW
ConnectNamedPipe
UnlockFileEx
FindFirstFileA
GetSystemWindowsDirectoryA
HeapCompact
GetCommMask
GetProcessHeap
LocalHandle
Beep
GetSystemTime
SetMailslotInfo
GetExitCodeProcess
GetModuleFileNameA
GetTapePosition
DebugSetProcessKillOnExit
GetProcessVersion
EscapeCommFunction
LoadLibraryExA
WaitForSingleObjectEx
CancelDeviceWakeupRequest
SetHandleCount
RequestDeviceWakeup
GetPrivateProfileStructW
UpdateResourceA
SetupComm
WaitForDebugEvent
CopyFileW
IsSystemResumeAutomatic
DebugActiveProcessStop
FileTimeToDosDateTime
GetSystemPowerStatus
MoveFileW
HeapReAlloc
GetSystemDirectoryW
RemoveDirectoryW
GetProcessHeaps
VirtualAlloc
GetPrivateProfileStringA
GetHandleInformation
GetDiskFreeSpaceW
CancelIo
HeapAlloc
GetTempPathW
TransmitCommChar
GetWindowsDirectoryA
CreateSemaphoreA
WritePrivateProfileSectionW
GetProfileIntW
LockFileEx
DisableThreadLibraryCalls
ExpandEnvironmentStringsW
MoveFileExW
lstrcmpiW
LocalSize
DeviceIoControl
PulseEvent
SetProcessWorkingSetSize
CloseHandle
GetEnvironmentVariableA
SetFirmwareEnvironmentVariableW
FileTimeToSystemTime
HeapUnlock
GetStartupInfoW
WaitForMultipleObjects
EraseTape
SetVolumeLabelW
ResumeThread
EndUpdateResourceA
FindNextFileW
GetLogicalDrives
VirtualProtectEx
CreateFileMappingW
GetLastError
SetCommTimeouts
DeleteAtom
GetEnvironmentVariableW
SetProcessShutdownParameters
ContinueDebugEvent
OpenEventW
FatalAppExitA
BackupSeek
GetNumaProcessorNode
GetSystemInfo
SearchPathA
QueryDosDeviceW
GetFirmwareEnvironmentVariableW
HeapFree
GetTempPathA
SetFilePointerEx
CreateNamedPipeW
IsBadStringPtrA
DosDateTimeToFileTime
PurgeComm
FindResourceW
SetThreadExecutionState
DeleteFileW
SetCommMask
SetCommState
EnumResourceNamesW
GlobalUnfix
GetFileSize
GetFileSizeEx
GetFileAttributesExW
IsBadStringPtrW
GetPrivateProfileSectionW
GetNamedPipeHandleStateA
GlobalDeleteAtom
SetProcessPriorityBoost
EnumResourceLanguagesW
GlobalGetAtomNameA
ExitProcess
GetNumaHighestNodeNumber
WritePrivateProfileSectionA
DebugBreakProcess
GetDefaultCommConfigW
SetThreadPriorityBoost
TlsSetValue
GetProcessTimes
lstrcpyW
FindFirstChangeNotificationW
SetFileAttributesW
LockFile
MultiByteToWideChar
WritePrivateProfileStructW
EndUpdateResourceW
OpenEventA
CommConfigDialogA
BuildCommDCBW
AddAtomA
GetPrivateProfileIntW
CreateDirectoryExA
GetWriteWatch
FormatMessageW
GetEnvironmentStringsW
lstrcpyA
CreateMailslotA
GetVersionExW
MulDiv
GetShortPathNameW
GetProcessIoCounters
OpenSemaphoreA
GetProcessAffinityMask
GetVersionExA
GetThreadContext
SetFilePointer
DefineDosDeviceA
CreateSemaphoreW
CreateProcessW
LoadLibraryW
FreeResource
GetCompressedFileSizeW
lstrcmpiA
IsBadHugeReadPtr
QueryDosDeviceA
GetSystemWindowsDirectoryW
GetBinaryTypeA
FindNextFileA
GlobalReAlloc
CreateFileMappingA
FindResourceExW
PrepareTape
GetAtomNameA
CreateEventA
LoadResource
IsBadWritePtr
GetPrivateProfileSectionNamesA
TzSpecificLocalTimeToSystemTime
GetFullPathNameW
OutputDebugStringW
CreateMutexA
QueryPerformanceCounter
WaitNamedPipeA
VirtualQueryEx
FreeLibrary
PostQueuedCompletionStatus
CreateIoCompletionPort
BuildCommDCBA
WriteProfileStringA
SetErrorMode
FindResourceA
SetVolumeLabelA
HeapSize
FindFirstFileW
ClearCommError
HeapLock
GetFileType
InterlockedExchangeAdd
RaiseException
SleepEx
GetComputerNameA
QueryPerformanceFrequency
CreateMailslotW
OutputDebugStringA
GetQueuedCompletionStatus
CopyFileA
GetCommandLineA
GetStdHandle
GetNamedPipeHandleStateW
ResetWriteWatch
CreateProcessA
GetLongPathNameW
GetNamedPipeInfo
FreeEnvironmentStringsA
GetCurrentThread
WriteProcessMemory
LocalFileTimeToFileTime
TlsAlloc
WriteFile
SetFileShortNameW
VirtualQuery
VirtualProtect
InterlockedCompareExchange
GetCurrentProcess
SetThreadContext
SuspendThread
SetLastError
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
VirtualFree
HeapDestroy
HeapCreate
WideCharToMultiByte
GetEnvironmentStrings
Sleep
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsGetValue
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
OffsetRect
IntersectRect
InflateRect
ClientToScreen
CreateDialogParamW
GetWindowThreadProcessId
SetWindowLongA
RemovePropA
DestroyWindow
CharLowerW
MoveWindow
SetWindowLongW
CreateDialogParamA
SetWindowTextW
SetActiveWindow
GetWindowTextW
MsgWaitForMultipleObjects
GetWindowLongW
PostMessageW
SendMessageW
GetDlgItem
GetWindowTextA
SetPropW
GetClientRect
GetClassNameA
SendMessageA
GetPropA
RealGetWindowClassW
SetPropA
TranslateMessage
DispatchMessageW
GetParent
GetWindowRect
EnumChildWindows
CharUpperW
RealGetWindowClassA
RemovePropW
GetClassNameW
GetPropW
BringWindowToTop
PeekMessageW
GetWindowLongA
VarCmp
VariantCopy
SysStringLen
SysFreeString
VariantInit
VariantClear
VariantChangeType
SysAllocString
DllAction
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ