DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3e6dbaae980de4fa96dbf3a6857587cb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e6dbaae980de4fa96dbf3a6857587cb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e6dbaae980de4fa96dbf3a6857587cb_JaffaCakes118
Size
1.2MB
MD5
3e6dbaae980de4fa96dbf3a6857587cb
SHA1
79645f41b26135675f5abc16ed1d04695c026037
SHA256
1a8727100ecec8ce8bb5e6d778b9ba5594926545c0523b6d69601bdbe01b990a
SHA512
c171e41530023a1c2d6acd5af9c62d0862e4cd09bdb10477e56b7019260994a5ebaa8ea127e43c4a548111921138d46d010ab5ab22e1c3e0a3718224c79ebba0
SSDEEP
24576:rinUyiLwYHw9zWB4qIuvmBSBR70riSh+cVZlNxzDPriq8Y2hN:+nUZLHwta4qIuNBp0ritcVZ3RWq8YS
Checks for missing Authenticode signature.
resource |
---|
3e6dbaae980de4fa96dbf3a6857587cb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OpenFileMappingA
GlobalDeleteAtom
GetEnvironmentStrings
GetExitCodeThread
GetSystemWow64DirectoryW
GetProcessAffinityMask
GetProfileStringW
ProcessIdToSessionId
LocalSize
FlushViewOfFile
DisconnectNamedPipe
SetFileApisToOEM
FindFirstVolumeMountPointW
WaitForSingleObject
FindAtomW
GetDateFormatW
IsValidLocale
InterlockedDecrement
GetUserDefaultLCID
SwitchToThread
lstrcatW
SleepEx
LoadLibraryA
RegisterWaitForSingleObject
GetProcAddress
CoLockObjectExternal
GetHGlobalFromILockBytes
OleInitialize
StgOpenStorageEx
OleSetMenuDescriptor
OleQueryCreateFromData
OleRegEnumVerbs
SetScrollInfo
EnumDisplaySettingsA
IsCharAlphaNumericW
CloseDesktop
GetMenuItemInfoW
AttachThreadInput
LoadAcceleratorsW
LoadCursorW
TabbedTextOutA
WindowFromDC
MessageBoxExA
BeginDeferWindowPos
SetScrollPos
ReleaseDC
SetTimer
InvalidateRgn
GetMessageA
ClientToScreen
CreateIcon
CallWindowProcW
GetWindowLongW
SysAllocString
SysStringByteLen
SysReAllocStringLen
SHCreateShellPalette
StrTrimW
UrlCreateFromPathW
PathGetCharTypeA
PathIsUNCServerW
RegFlushKey
SaferSetLevelInformation
RegLoadKeyA
GetEffectiveRightsFromAclW
RegDisablePredefinedCache
RegSetValueExA
MapGenericMask
SHBrowseForFolderA
SHGetInstanceExplorer
SHSetLocalizedName
ShellAboutW
SHAddToRecentDocs
SHGetFileInfoA
SetLayout
ExtCreatePen
GetTextExtentPoint32A
RoundRect
TextOutW
SetTextAlign
CreateRoundRectRgn
GetTextFaceW
FillRgn
SetDIBColorTable
SetPolyFillMode
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ