DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
33b797904cf8cf03764e398a095c2965_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33b797904cf8cf03764e398a095c2965_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
33b797904cf8cf03764e398a095c2965_JaffaCakes118
Size
156KB
MD5
33b797904cf8cf03764e398a095c2965
SHA1
0dc50fcfd12db9de02e2c34e5fd09c1159ba841a
SHA256
d211aebc920965503ab8b5ff6b27b1a4b92e758fabb5e264f71e12e802f730f9
SHA512
8647e5dedd96e08b8de410921e71e5081233c69089bdf1577201b08ea4e44ac1aff3d9bf241cd68c863abe281d69cedf2c25b92e3da90d135a7e7272f67bc3d4
SSDEEP
3072:Jw54Frz+VQVToyDqaQJzGZlKF6H/SVD8H7/2bqFVlb4v6kzDoK+z6S4:Jw54xz+VQVToyDqaQJzGZlKF6fSVD8HQ
Checks for missing Authenticode signature.
resource |
---|
33b797904cf8cf03764e398a095c2965_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnumChildWindows
GetClassNameA
SetWindowPos
EnumWindows
DefWindowProcA
SetTimer
KillTimer
DispatchMessageA
wsprintfA
SystemParametersInfoA
GetWindowThreadProcessId
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
GetOEMCP
GetACP
ReadFile
SetEndOfFile
SetFilePointer
FlushFileBuffers
CloseHandle
CreateFileA
OpenProcess
FreeLibrary
WriteProcessMemory
GetProcAddress
VirtualAllocEx
LoadLibraryA
SleepEx
GetTickCount
GetLocalTime
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetSystemDirectoryA
GetModuleFileNameA
GetCurrentProcessId
VirtualFree
VirtualAlloc
IsBadWritePtr
WriteFile
GetFileAttributesA
CreateRemoteThread
WideCharToMultiByte
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
HeapCreate
HeapDestroy
GetVersionExA
GetCPInfo
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
GetEnvironmentVariableA
GetModuleHandleA
LocalFree
InterlockedDecrement
InterlockedIncrement
RtlUnwind
HeapAlloc
GetLastError
MultiByteToWideChar
HeapFree
HeapReAlloc
GetCommandLineA
GetVersion
RaiseException
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
LCMapStringA
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetFileType
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
StrStrIA
CoInitialize
CoCreateGuid
CoCreateInstance
VariantInit
SysAllocString
GetErrorInfo
InternetCloseHandle
InternetOpenA
InternetSetOptionA
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
GetModuleBaseNameA
EnumProcessModules
EnumProcesses
SHGetValueA
SHSetValueA
UuidToStringA
Netbios
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ