DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
47a4bba5458967240c4b0da318cfa3b2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47a4bba5458967240c4b0da318cfa3b2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
47a4bba5458967240c4b0da318cfa3b2_JaffaCakes118
Size
160KB
MD5
47a4bba5458967240c4b0da318cfa3b2
SHA1
b77c083b2d7980de15a100dc8371c3195700355a
SHA256
8d65e4b39d6387454e0c777d7a0c9162ed33b45b52f46a4708fb6e7cf2366f2b
SHA512
d0462d6ecf205ebd25d014568fef4356131a698d8f619f3648791d397b203c4934b70b847a54e67facb2447d3427e23259b54deb1271f6b166d16f85aeacb452
SSDEEP
1536:ho9n1w81xiNOkglwmCeiKjZf0wt9kqTtqJ201lBQl+9gICS4AvJVdrOJoqLaQGen:kdZlwwjLgpQlMTNndrOJotQj+K
Checks for missing Authenticode signature.
resource |
---|
47a4bba5458967240c4b0da318cfa3b2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TranslateMessage
DispatchMessageA
SystemParametersInfoA
SetWindowPos
GetMessageA
RegisterClassExA
DefWindowProcA
SetTimer
wsprintfA
CreateWindowExA
ShowWindow
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
KillTimer
RaiseException
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
MoveFileExA
CloseHandle
WaitForSingleObject
CreateProcessA
LocalFree
GetProcAddress
LoadLibraryA
DeleteFileA
GetSystemDirectoryA
GetLocalTime
SleepEx
GetModuleFileNameA
OpenProcess
GetTickCount
CreateFileA
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
GetCurrentProcessId
IsBadWritePtr
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
FreeLibrary
HeapReAlloc
GetOEMCP
VirtualAlloc
VirtualFree
HeapCreate
GetACP
GetCPInfo
ReadFile
SetEndOfFile
SetFilePointer
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
HeapDestroy
GetVersionExA
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
HeapAlloc
HeapFree
GetEnvironmentVariableA
GetLastError
MultiByteToWideChar
RtlUnwind
GetCommandLineA
GetVersion
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
WriteFile
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetFileAttributesA
GetFileType
SetHandleCount
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
StrStrIA
CoInitialize
CoCreateGuid
CoCreateInstance
VariantInit
SysAllocString
GetErrorInfo
UuidToStringA
EnumProcessModules
GetModuleBaseNameA
EnumProcesses
InternetCloseHandle
InternetOpenA
InternetSetOptionA
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
Netbios
SHGetValueA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ