DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3b873049525c770a1b6bc8d8d603cf41_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b873049525c770a1b6bc8d8d603cf41_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3b873049525c770a1b6bc8d8d603cf41_JaffaCakes118
Size
332KB
MD5
3b873049525c770a1b6bc8d8d603cf41
SHA1
c641aa8f3dc56205840a03b4e5b2e633136b2bdd
SHA256
5d36155490b99ee66c00a057a957d3a260dcf34e186b8d7ca4450427825e85d5
SHA512
659fd150debef165194c60369c480f89b89c1eeec251ae23f5c55626bf18e34837f449da1870861433d942655afe1920394189a6f94af6aa223f496582ded2c1
SSDEEP
3072:KeR+BWYzeydnzWGtwAw7JazSjcU342U6LiBQLHp4sCsluf8p9AmHBHFladZ6fCVb:5qWYldmtcUFGfHmsdZACVzPZbV5+
Checks for missing Authenticode signature.
resource |
---|
3b873049525c770a1b6bc8d8d603cf41_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryW
CloseHandle
lstrcmpiW
CreateFileW
WriteFile
GetModuleFileNameA
VirtualQuery
FlushFileBuffers
FreeLibrary
LoadLibraryExW
GetModuleHandleW
MapViewOfFile
GetSystemDirectoryW
GetFileAttributesW
GetCurrentProcessId
DeleteFileA
GetTempPathA
GetTempFileNameW
lstrcpyA
lstrlenA
OpenMutexW
GetFileAttributesA
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileInformationByHandle
CreateFileA
InterlockedExchangeAdd
DuplicateHandle
GetCurrentProcess
OpenProcess
lstrcmpW
GlobalUnlock
GetProcAddress
Sleep
CreateMutexW
SetFilePointer
ReadFile
FindClose
FindNextFileW
FindFirstFileW
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetLocaleInfoW
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
LoadLibraryA
SetConsoleCtrlHandler
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
GetLastError
WideCharToMultiByte
GetModuleFileNameW
InterlockedDecrement
lstrlenW
InterlockedIncrement
GetVersionExW
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GlobalLock
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStartupInfoA
SetHandleCount
GetFileType
GetCommandLineA
GetCurrentThreadId
GetSystemInfo
GetModuleHandleA
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
GetConsoleMode
GetConsoleCP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
GetStdHandle
HeapCreate
VirtualFree
FatalAppExitA
ExitProcess
GetCurrentThread
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetWindowLongW
GetParent
GetClassNameW
SetTimer
GetWindowLongW
EnumWindows
CharNextW
FindWindowExW
GetWindowThreadProcessId
KillTimer
GetWindow
GetTopWindow
CallWindowProcW
RegisterWindowMessageW
SendMessageW
UnhookWindowsHookEx
PtInRect
UnregisterClassA
GetKeyboardLayout
OpenClipboard
GetClipboardData
CloseClipboard
CreateDIBSection
DeleteObject
GetDIBColorTable
StretchBlt
SelectObject
DeleteDC
CreateCompatibleDC
GetObjectW
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
SHGetSpecialFolderPathW
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
SysAllocString
DispCallFunc
VariantChangeType
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SafeArrayDestroy
SysStringByteLen
SysAllocStringByteLen
SysReAllocStringLen
SafeArrayLock
VariantCopy
VariantClear
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
VarBstrCmp
SysAllocStringLen
VarBstrCat
SysFreeString
SysStringLen
SafeArrayGetVartype
SafeArrayUnlock
PathFindExtensionW
GdipSaveImageToFile
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipFree
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
TransparentBlt
AlphaBlend
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ