DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4538debb4a2bbf30bb0c0d4e79825ea6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4538debb4a2bbf30bb0c0d4e79825ea6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4538debb4a2bbf30bb0c0d4e79825ea6_JaffaCakes118
Size
2.6MB
MD5
4538debb4a2bbf30bb0c0d4e79825ea6
SHA1
79f161c4c9c2a0f43442525674d31b6e66ab1995
SHA256
1a8273bbf7d0d9d7bc9d15f2146260e75f92f8c24e0bfb51af4acb31a6b32f3e
SHA512
5d90b91c3e65311f27591894e7647cabe752097665c5e0770e993a72b2954f9324a44fa8497c6964b6539e8041f63393d0fb050f18a1a632f087cd50ae18036b
SSDEEP
49152:8CUpvYesNGC0ZLrBU77G5SO9F5UF2vsx28lA+v6+FllFMQINGTDreP9FrQaN:q5LZJU7q5zF5U528lAr2MQvDr4H8a
Checks for missing Authenticode signature.
resource |
---|
4538debb4a2bbf30bb0c0d4e79825ea6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetVolumeLabelW
VirtualProtect
GetShortPathNameA
FindCloseChangeNotification
GetDateFormatA
GetSystemInfo
GetProcessVersion
GetCurrentActCtx
SetLastError
GetStringTypeExW
SetErrorMode
GetFileAttributesA
LoadLibraryA
SearchPathW
SetFileTime
CreateMailslotW
GetTickCount
lstrcmpA
InterlockedIncrement
LockResource
IsBadWritePtr
DnsHostnameToComputerNameW
GetProcAddress
GetThreadPriority
CoSetProxyBlanket
CoQueryProxyBlanket
CoFreeUnusedLibraries
OleCreate
CoCreateInstanceEx
DialogBoxIndirectParamW
EnumThreadWindows
SetPropA
NotifyWinEvent
MapWindowPoints
SetActiveWindow
SetCursorPos
SetFocus
CreateIconIndirect
MessageBoxExW
PathBuildRootW
PathRemoveFileSpecA
StrDupA
StartServiceA
QueryServiceConfig2W
CloseServiceHandle
NotifyBootConfigStatus
InitiateSystemShutdownW
ControlService
StartServiceW
CheckTokenMembership
RegisterServiceCtrlHandlerExW
CredReadW
SHGetFolderPathAndSubDirW
SelectPalette
Escape
Polygon
CombineRgn
CreateHalftonePalette
ExtFloodFill
GetBkColor
LPtoDP
GetTextMetricsA
CreateEllipticRgnIndirect
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ