DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllRunMain
DllRunUninstall
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2ed323b56c6d4dbfae0b76d81792f6a6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ed323b56c6d4dbfae0b76d81792f6a6_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ed323b56c6d4dbfae0b76d81792f6a6_JaffaCakes118
Size
224KB
MD5
2ed323b56c6d4dbfae0b76d81792f6a6
SHA1
27201f65f5a339c418beb1ac25ede285acca97e1
SHA256
0b5c641215dafcb0ff521b9e5a0d05458283442a0dca6cdd1da4cd356170ec31
SHA512
69e582ad66d37da17a2f8942af422a6b5c15ebd640278e064c863e4cc9730e8489d1d6e36d70c9fd92ddc64ab516137b041bef1cbdc79f591f7bbec9fff12ec5
SSDEEP
3072:QJrCpD2uJ7i6n+JcduxqIVDLjUm3DT6iTyHg4Ag0FuqmYAxvlkZAEA:5p5FDn+Jx3UWTU3AOuWeZTA
Checks for missing Authenticode signature.
resource |
---|
2ed323b56c6d4dbfae0b76d81792f6a6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetACP
MultiByteToWideChar
lstrlenW
RaiseException
InterlockedExchange
GetStartupInfoA
GetLastError
SetLastError
lstrcmpiA
GetThreadLocale
GetProcAddress
EnterCriticalSection
GetTempFileNameA
GetLocalTime
CreateFileMappingA
LockResource
GetModuleFileNameA
GetModuleHandleA
DeleteCriticalSection
GetCurrentThreadId
OutputDebugStringA
GetVersionExA
CloseHandle
GetVersion
GetTempPathA
DeleteFileA
CreateThread
lstrcpyA
lstrcpynA
IsDBCSLeadByte
GetCurrentProcess
FlushInstructionCache
HeapAlloc
DisableThreadLibraryCalls
CreateMutexA
CreateDirectoryA
lstrcatA
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
HeapFree
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
GetSystemDirectoryA
GetModuleFileNameW
CreateProcessA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetStringTypeA
TerminateProcess
IsBadWritePtr
VirtualFree
HeapCreate
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
RtlUnwind
GetCommandLineA
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
LocalFree
HeapSize
HeapReAlloc
HeapDestroy
GetFileAttributesW
LeaveCriticalSection
SizeofResource
LoadLibraryW
WideCharToMultiByte
FindResourceExA
InitializeCriticalSection
WriteFile
GetModuleHandleW
LoadResource
FreeLibrary
UnmapViewOfFile
MapViewOfFile
GetLocaleInfoA
lstrlenA
SetFilePointer
lstrcmpA
FindResourceA
GetFileSize
CreateFileA
ExitProcess
FindWindowExA
DestroyAcceleratorTable
LoadBitmapA
LockWindowUpdate
UpdateWindow
LoadImageA
UnregisterClassA
CharNextA
GetMessageA
TranslateMessage
DispatchMessageA
IsWindow
DestroyWindow
GetWindowRect
SetWindowLongA
RegisterClassExA
GetClassInfoExA
wsprintfA
BeginPaint
EndPaint
IsChild
GetFocus
SetFocus
RedrawWindow
GetClassNameA
GetParent
SetWindowPos
CreateAcceleratorTableA
SetCapture
ReleaseCapture
InvalidateRect
InvalidateRgn
GetDesktopWindow
RegisterWindowMessageA
SetTimer
PostQuitMessage
MessageBoxA
LoadCursorA
CreateWindowExA
GetWindowLongA
DefWindowProcA
GetDlgItem
CallWindowProcA
DestroyMenu
CreatePopupMenu
AppendMenuA
GetSysColor
FillRect
GetDC
ReleaseDC
SendMessageA
ClientToScreen
GetSystemMetrics
GetClientRect
ShowWindow
GetWindow
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
PostMessageA
FindWindowA
TrackPopupMenu
DeleteDC
DeleteObject
SetBkColor
CreateDIBSection
CreateSolidBrush
TextOutA
SelectObject
GetStockObject
GetTextExtentPoint32A
GetObjectA
CreateCompatibleBitmap
BitBlt
GetDeviceCaps
SetStretchBltMode
StretchBlt
GetDIBits
SetTextColor
CreateCompatibleDC
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegSetValueExA
RegQueryValueExA
SHGetSpecialFolderPathA
SHGetFileInfoA
CLSIDFromString
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
CoTaskMemAlloc
OleInitialize
OleUninitialize
StringFromGUID2
CoInitializeEx
CoUninitialize
CoInitialize
StringFromCLSID
CoTaskMemFree
CoCreateInstance
CLSIDFromProgID
SysStringLen
VariantClear
LoadTypeLi
VariantInit
SysFreeString
LoadRegTypeLi
VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
RegisterTypeLi
UnRegisterTypeLi
SysAllocString
OleCreateFontIndirect
DispCallFunc
PathFindExtensionA
send
recv
connect
WSAStartup
WSAGetLastError
htons
WSACleanup
closesocket
gethostbyname
WSASocketA
InternetQueryOptionA
GetAdaptersInfo
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllRunMain
DllRunUninstall
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ