DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3c28c24d7319bda40e0653278d89fe72_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c28c24d7319bda40e0653278d89fe72_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
3c28c24d7319bda40e0653278d89fe72_JaffaCakes118
Size
152KB
MD5
3c28c24d7319bda40e0653278d89fe72
SHA1
0a766c49b4a286311c8c7df70d1d93a620a3362e
SHA256
8c6d116ed604deb1b3b884efa32d0bc6c8e25acf78622a382d08b14bb4d07528
SHA512
3d1e3038eec33fd54806980696318c4dd92244c211eeaf8adcc0c3dbd7db6dcfa417c6d6030e7b688dc6bcdb5d07b5736e70c4e11e42b09afb9e08204f1d1d31
SSDEEP
1536:Bwtgx3xs4EDkK/OWCC6ZuiTM+tG2Ad25Is9yebPMICS4ANpoHOeLaft0Bq5vL:6Sm4e6QqxyebPnLpoHSDd
Checks for missing Authenticode signature.
resource |
---|
3c28c24d7319bda40e0653278d89fe72_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegisterClassExA
SetWindowPos
SystemParametersInfoA
DefWindowProcA
SetTimer
DispatchMessageA
TranslateMessage
GetMessageA
KillTimer
CreateWindowExA
wsprintfA
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
ShowWindow
RaiseException
GetOEMCP
GetACP
ReadFile
FreeLibrary
CloseHandle
CreateRemoteThread
WriteProcessMemory
LocalFree
VirtualAllocEx
OpenProcess
LoadLibraryA
CreateFileA
GetLocalTime
SleepEx
GetTickCount
GetModuleFileNameA
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetSystemDirectoryA
GetCurrentProcessId
WriteFile
GetFileAttributesA
GetFileType
TerminateProcess
GetCurrentProcess
GetProcAddress
HeapReAlloc
SetEndOfFile
SetFilePointer
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadWritePtr
VirtualAlloc
VirtualFree
IsBadReadPtr
SetUnhandledExceptionFilter
HeapCreate
SetHandleCount
GetCPInfo
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
InterlockedDecrement
InterlockedIncrement
RtlUnwind
HeapAlloc
HeapFree
HeapDestroy
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
LCMapStringA
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
StrStrIA
CoCreateInstance
CoCreateGuid
CoInitialize
VariantInit
SysAllocString
GetErrorInfo
SHSetValueA
SHGetValueA
Netbios
GetModuleBaseNameA
EnumProcesses
EnumProcessModules
UuidToStringA
HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ