DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
332649d07b801cc9153a197f0c644162_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
332649d07b801cc9153a197f0c644162_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
332649d07b801cc9153a197f0c644162_JaffaCakes118
Size
2.4MB
MD5
332649d07b801cc9153a197f0c644162
SHA1
e2a97ba2336705a9a263ea6aab9ac0dda28a3eb2
SHA256
a30ff75465b22956a6814af285959d26c7f38be243be84f79c56c1e0c21ea6a4
SHA512
3b890e0f85d02d59607ed394b51c18b593c504a649ae0f63543d62e09f63b4b3106acd386adacf55a1b683fb3b768fc38d4ba97b56193ee4f941348d29903376
SSDEEP
49152:E2hVOyzcexllQZMMIUSWTL/N7j1u7M0Vg9rQ2CAgj7D+tR:5h0YcenlQ/lL/N7jwM0SdrW7D+t
Checks for missing Authenticode signature.
resource |
---|
332649d07b801cc9153a197f0c644162_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTimeFormatW
GetCommState
DuplicateHandle
GetVersionExA
SetEvent
UnmapViewOfFile
ExitProcess
GetFileSizeEx
GetWindowsDirectoryA
SetupComm
HeapUnlock
GetEnvironmentStringsW
GetTapeParameters
CancelIo
FindResourceA
ReadFileEx
GetLocaleInfoA
RemoveDirectoryW
GetVersion
FindFirstChangeNotificationA
GetComputerNameA
LockFile
CopyFileA
DeleteFileW
EnterCriticalSection
GetBinaryTypeA
CreateRemoteThread
SetProcessWorkingSetSize
LoadLibraryA
GetProcAddress
ReleaseMutex
CoLockObjectExternal
RevokeDragDrop
OleLoadFromStream
OleUninitialize
StgOpenStorageOnILockBytes
CoRevertToSelf
CreatePointerMoniker
CoUninitialize
SystemParametersInfoA
SetClassLongA
UnhookWindowsHookEx
CheckMenuItem
CharPrevA
SetMenuItemInfoW
SetCapture
IsZoomed
GetDialogBaseUnits
TrackMouseEvent
LoadBitmapW
IsChild
GetSubMenu
GetWindowLongA
ModifyMenuA
BeginPaint
GetInputState
LoadCursorW
CharLowerBuffW
CopyRect
GetUserObjectInformationA
OpenWindowStationA
FindWindowW
LookupIconIdFromDirectory
wsprintfA
UnregisterClassW
FindWindowExW
GrayStringW
DispatchMessageW
GetPropW
SysReAllocString
SysStringLen
SysAllocStringLen
StrCmpNIW
SHSetValueW
PathGetCharTypeW
SHCreateShellPalette
PathFindExtensionA
StrStrA
UrlEscapeW
PathFindExtensionW
QueryServiceConfig2W
CreateServiceW
CheckTokenMembership
RegEnumValueW
MapGenericMask
RegUnLoadKeyW
OpenProcessToken
RegEnumKeyExA
RegDeleteKeyW
GetServiceKeyNameW
RegFlushKey
LockServiceDatabase
RegDeleteKeyA
RegOpenCurrentUser
ChangeServiceConfigW
ImpersonateLoggedOnUser
RegConnectRegistryA
SHGetSpecialFolderLocation
SHGetFileInfoW
SHPathPrepareForWriteW
PtInRegion
GetRgnBox
DeleteDC
StrokePath
DescribePixelFormat
GetViewportExtEx
TranslateCharsetInfo
StrokeAndFillPath
CreatePolygonRgn
GetCharWidthW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ