DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3bb4aa29f38dad1efe4c82570a5afb46_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bb4aa29f38dad1efe4c82570a5afb46_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3bb4aa29f38dad1efe4c82570a5afb46_JaffaCakes118
Size
156KB
MD5
3bb4aa29f38dad1efe4c82570a5afb46
SHA1
c07144682f7744360d63b99a54211640408a5675
SHA256
bd3b68b6a30f7d9f53211c8a921e75d2576e0889811f1165d414e49fcc0b6c64
SHA512
1231d972b77522ffd94f2744c20622bdf6f04ce039255719b0949a5a1b25c94805fc085894435005930b8ea93058a1d7c65775d6bf3a8a2de65f4db8eb532046
SSDEEP
3072:SqOgbVm163qMq38uSogFquF8xg3Hfoq2TBq:SqvVJzmUquFC+2TBq
Checks for missing Authenticode signature.
resource |
---|
3bb4aa29f38dad1efe4c82570a5afb46_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
SystemParametersInfoA
DefWindowProcA
SetTimer
wsprintfA
DispatchMessageA
SetWindowPos
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
KillTimer
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
ReadFile
SetEndOfFile
FreeLibrary
CloseHandle
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
LoadLibraryA
SleepEx
GetTickCount
GetLocalTime
GetModuleFileNameA
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetSystemDirectoryA
GetCurrentProcessId
CreateFileA
LCMapStringA
LCMapStringW
WriteFile
GetFileAttributesA
GetProcAddress
MultiByteToWideChar
SetFilePointer
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
TlsGetValue
SetLastError
TlsFree
GetCPInfo
TlsAlloc
TlsSetValue
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
LocalFree
InterlockedDecrement
InterlockedIncrement
GetLastError
GetCurrentThreadId
HeapFree
HeapAlloc
WideCharToMultiByte
HeapReAlloc
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetFileType
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
StrStrIA
CoInitialize
CoCreateInstance
CoCreateGuid
VariantInit
SysAllocString
GetErrorInfo
EnumProcesses
GetModuleBaseNameA
EnumProcessModules
UuidToStringA
Netbios
SHSetValueA
SHGetValueA
HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ