DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4203e9ea5d67b68fa9c81177da98629f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4203e9ea5d67b68fa9c81177da98629f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4203e9ea5d67b68fa9c81177da98629f_JaffaCakes118
Size
160KB
MD5
4203e9ea5d67b68fa9c81177da98629f
SHA1
0c148e8584cea41726527cfd58878312deee0c36
SHA256
65a61b76e740db53f83576d8ccbd88a3630c40977331812d662d57ed16f5138f
SHA512
7708d2641cdff78f2add1d6c902a8ed09bed592578f6d232352bcbb3a566cd7bd9da793e157c6fbc7cb0fb8c2fae47af4b75844f49e67e0597b55ce1038abed8
SSDEEP
1536:9l2msZL046Cw/6kWt0TzFXyJXKgTS0nuHTwu10KJ1sunnT9cD269yiL1g9+ICS48:9+SCr+XerSsy0KcQK1+FQN4ocb2P
Checks for missing Authenticode signature.
resource |
---|
4203e9ea5d67b68fa9c81177da98629f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
CreateProcessA
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
GetSystemDirectoryA
GetCurrentProcessId
SleepEx
GetModuleFileNameA
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
CreateFileA
MoveFileExA
RaiseException
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetOEMCP
GetACP
ReadFile
SetEndOfFile
SetFilePointer
FlushFileBuffers
GetLocalTime
OpenProcess
CloseHandle
GetTickCount
QueryPerformanceCounter
LocalFree
QueryPerformanceFrequency
SetStdHandle
GetCPInfo
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetFileType
GetFileAttributesA
WriteFile
LCMapStringW
LCMapStringA
TlsGetValue
SetLastError
TlsFree
TlsAlloc
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
HeapAlloc
HeapFree
GetLastError
MultiByteToWideChar
HeapReAlloc
RtlUnwind
GetCommandLineA
GetVersion
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCurrentThreadId
TlsSetValue
KillTimer
wsprintfA
DispatchMessageA
DefWindowProcA
SetTimer
SystemParametersInfoA
SetWindowPos
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
StrStrIA
CoInitialize
CoCreateGuid
CoCreateInstance
GetErrorInfo
SysAllocString
VariantInit
UuidToStringA
InternetSetOptionA
HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
SHSetValueA
SHGetValueA
Netbios
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ