DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
361c23829fb3b25d49ae6f93b8030c2c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
361c23829fb3b25d49ae6f93b8030c2c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
361c23829fb3b25d49ae6f93b8030c2c_JaffaCakes118
Size
76KB
MD5
361c23829fb3b25d49ae6f93b8030c2c
SHA1
1df424dcbbd23a66d9b204be52b87796d4a90505
SHA256
11bd39ec2b156cbe959a9249518bc0615f6058fe55553cb7200b941ff7bfe760
SHA512
3c74039294706254799bd3c27e6118a3227b361d94ee3231bff9c5bf8d307c5d187209c07fa6fbaf276f1476b75e6661d2265202150ae62504abdc9fa1088343
SSDEEP
1536:qGI5z/ZBjKi1Dpw4A/4ItN+D7Qw4J5c7tGxrrJm+mVO5F:q75zxBjKi1Dpwx4ItNuUw4HEGZrJmTY
Checks for missing Authenticode signature.
resource |
---|
361c23829fb3b25d49ae6f93b8030c2c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
WaitForSingleObject
CloseHandle
VirtualProtect
ReleaseMutex
HeapFree
InterlockedExchange
DeleteFileA
InterlockedDecrement
MapViewOfFile
CreateDirectoryA
HeapAlloc
InterlockedIncrement
GetModuleHandleA
ReadFile
GetModuleFileNameA
MoveFileExA
UnlockFile
SetMailslotInfo
IsBadWritePtr
CreateFileW
TerminateJobObject
ReleaseActCtx
SetCurrentDirectoryW
GetStringTypeExA
SetConsoleActiveScreenBuffer
lstrcmpiA
FindNextChangeNotification
GetVolumePathNameW
CancelIo
IsBadHugeWritePtr
GetVersionExA
SetCurrentDirectoryA
CreateRemoteThread
LockResource
SetFileTime
SetDefaultCommConfigW
FreeResource
SetLocalTime
GetCPInfo
GetWindowsDirectoryA
CreateToolhelp32Snapshot
PeekConsoleInputW
GetConsoleCP
DeleteVolumeMountPointW
CreateMutexW
OpenSemaphoreA
GetCommState
CreateWaitableTimerW
WriteConsoleW
HeapWalk
CopyFileW
Beep
IsValidLanguageGroup
GetLocaleInfoA
GetLongPathNameW
GlobalAddAtomW
IsWow64Process
IsValidCodePage
GetStringTypeExW
ReadProcessMemory
ProcessIdToSessionId
GetDiskFreeSpaceA
SHDeleteKeyA
StrCatBuffW
StrChrW
PathSkipRootW
StrChrIW
wnsprintfW
StrToIntExW
PathIsURLW
PathFindNextComponentW
StrStrA
SHCreateShellPalette
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ