DllMain
GetUserInfo
IsCompaqNETUser
IsExistingAnyIAUser
IsMSNIAUser
Migrate
MigrateEx
MigrateRunDll32
Static task
static1
Behavioral task
behavioral1
Sample
41686d5385a84e3b3d8c46bbcfc8970e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
41686d5385a84e3b3d8c46bbcfc8970e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41686d5385a84e3b3d8c46bbcfc8970e_JaffaCakes118
Size
52KB
MD5
41686d5385a84e3b3d8c46bbcfc8970e
SHA1
fecb02370d8371ad1db3e28380b45430410ba985
SHA256
377a6ffd69d7cc259ddb780d9619ab2b880990e81fab793cf875a0f004558650
SHA512
ac3d303633ba8bd464f3caf9674c3bd235fd240747904668b0cb531e4073fca11ba37b689e203c82bfeda0b52c1183c7e75ed9028dc6c3d38348893b5e701cd6
SSDEEP
768:hvdCxTv3L1FyNjwbG5a4+f0qs4fiiGB/y6wJScDwtvb9MRWv/PbWv:rwKq8q9fvGBgjwtjKmbWv
Checks for missing Authenticode signature.
resource |
---|
41686d5385a84e3b3d8c46bbcfc8970e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
RemoveDirectoryA
FindClose
lstrcmpA
FindNextFileA
CreateProcessA
SetFileAttributesA
GetFileAttributesA
GetPrivateProfileSectionA
CopyFileA
GetTempPathA
GetModuleFileNameA
GetWindowsDirectoryA
GetExitCodeProcess
ExpandEnvironmentStringsA
LocalFree
Sleep
GetTickCount
LocalReAlloc
LocalAlloc
OpenMutexA
CreateFileA
IsDBCSLeadByte
WideCharToMultiByte
GetPrivateProfileIntA
GetPrivateProfileStringA
LoadLibraryA
GetProcAddress
HeapFree
WaitForSingleObject
GetProcessHeap
DeleteCriticalSection
GetVersion
InitializeCriticalSection
RtlUnwind
RaiseException
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
DisableThreadLibraryCalls
ExitProcess
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
EnterCriticalSection
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
CloseHandle
lstrcmpiA
LoadLibraryExA
FindFirstFileA
DeleteFileA
HeapAlloc
FreeLibrary
GetLastError
lstrcpyA
FormatMessageA
lstrcatA
lstrlenA
WriteFile
lstrcpynA
InterlockedIncrement
TlsGetValue
GetVersionExA
PostMessageA
wsprintfA
CharNextA
wvsprintfA
DispatchMessageA
FindWindowA
SendMessageA
PeekMessageA
TranslateMessage
RegEnumKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
SHGetPathFromIDListA
SHChangeNotify
SHGetMalloc
SHGetSpecialFolderLocation
CoUninitialize
CoCreateInstance
CoInitialize
SysFreeString
DllMain
GetUserInfo
IsCompaqNETUser
IsExistingAnyIAUser
IsMSNIAUser
Migrate
MigrateEx
MigrateRunDll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE