DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
O
Update
Static task
static1
Behavioral task
behavioral1
Sample
3898e3f12c1fd8b7f62e9900b0f090f5_JaffaCakes118.dll
Resource
win7-20240705-en
Target
3898e3f12c1fd8b7f62e9900b0f090f5_JaffaCakes118
Size
83KB
MD5
3898e3f12c1fd8b7f62e9900b0f090f5
SHA1
5a6e19e2d53b4d4a906a999095e6af3aa58d50ad
SHA256
ef17d115d4fb375943502f2d936b5cd0527d8473a7c8725695e7b3fd5d3b6b4a
SHA512
088f348ec96d26d46b1a6bd7a10ebabf1e9458c0430e4248702c6a2c0064ae132e6e9de4e02e43cf3487d4f995a643f2816fa42ffa66526a945674eb1698ac75
SSDEEP
1536:GlN8Kc0+k+4qyT4Yn0gr7978zHnkgvGJUAqzt2Tw:GLB+k+4qsR9IzjvGJUlzuw
Checks for missing Authenticode signature.
resource |
---|
3898e3f12c1fd8b7f62e9900b0f090f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
CreateMutexA
lstrcatA
lstrcpynA
lstrlenA
ReleaseMutex
WaitForSingleObject
GetCurrentProcessId
GetTickCount
lstrcmpA
CreateDirectoryA
GetModuleFileNameA
GetLastError
lstrcpyA
GetExitCodeProcess
WriteFile
ReadFile
GetFileSize
CreateFileA
CreateProcessA
DeleteFileA
InitializeCriticalSection
DeleteCriticalSection
CreateThread
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
MultiByteToWideChar
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
InterlockedIncrement
InterlockedDecrement
FlushInstructionCache
GetCurrentProcess
lstrlenW
WideCharToMultiByte
lstrcmpiA
IsDBCSLeadByte
GetShortPathNameA
GetModuleHandleA
FreeLibrary
CloseHandle
LoadResource
FindResourceA
LoadLibraryExA
HeapDestroy
GetProcAddress
LoadLibraryA
GetUserDefaultLangID
CompareFileTime
SystemTimeToFileTime
GetLocalTime
CopyFileA
DebugBreak
HeapReAlloc
HeapFree
RemoveDirectoryA
FindClose
SetLastError
SetFileAttributesA
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
MoveFileA
GetWindowsDirectoryA
LockResource
FlushFileBuffers
SetFilePointer
SetThreadPriority
ResumeThread
WritePrivateProfileSectionA
GetPrivateProfileIntA
GetPrivateProfileStringA
SetEvent
ResetEvent
CreateEventA
GetDriveTypeA
GetFileAttributesA
GetCurrentDirectoryA
GetSystemDirectoryA
WaitForMultipleObjects
WritePrivateProfileStringA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetCurrentThreadId
SizeofResource
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
CoCreateInstance
CoFreeUnusedLibraries
StringFromGUID2
VariantClear
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeTypeEx
SysFreeString
GetWindowLongA
CharNextA
DispatchMessageA
SetTimer
PostQuitMessage
KillTimer
wsprintfA
TranslateMessage
MessageBoxA
GetMessageA
GetKeyboardType
GetClassInfoExA
UnregisterClassA
LoadCursorA
RegisterClassExA
CreateWindowExA
CallWindowProcA
SetWindowLongA
DestroyWindow
EnumWindows
DefWindowProcA
PostMessageA
IsWindow
PeekMessageA
GetClassNameA
GetWindowThreadProcessId
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
O
Update
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ