DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5dcc26946e77992ef09091902b3c0ea5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5dcc26946e77992ef09091902b3c0ea5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5dcc26946e77992ef09091902b3c0ea5_JaffaCakes118
Size
212KB
MD5
5dcc26946e77992ef09091902b3c0ea5
SHA1
587f4d957759d4dc6cf1847d1204bb40350daf7c
SHA256
6e5ab6cfb3d5e3da48c36cef8af6e4f55b3d244625c7306bf55e79a284a0d167
SHA512
d721c71ea582b57aed6a66a6b2683af7dfceb7b358e157cbd75298661bf9b4ced8b48e84d97fdd4814fae8d9803a5705a39e2f0526d77d0496d747497eb226f9
SSDEEP
3072:8S9Wsyw4zErAtGoYmg5l4ZLfPCU6j4maD1OxDUkZIueJOzidr4cHo:8GWVZErMGvmHZLfUjvaDExDUkZAwOEcI
Checks for missing Authenticode signature.
resource |
---|
5dcc26946e77992ef09091902b3c0ea5_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
GlobalLock
GlobalSize
GlobalUnlock
WideCharToMultiByte
SetLastError
GetTickCount
CreateProcessW
lstrcmpiW
GetThreadLocale
SetThreadLocale
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
DeleteCriticalSection
RaiseException
InitializeCriticalSection
InterlockedDecrement
CloseHandle
InterlockedIncrement
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
Sleep
HeapSize
ExitProcess
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
SendMessageW
GetClassNameW
SetMenuDefaultItem
InsertMenuW
wsprintfW
EnumWindows
CharNextW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
ShellExecuteW
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
ReleaseStgMedium
StringFromGUID2
CoCreateInstance
UnRegisterTypeLi
SysAllocString
SysStringLen
RegisterTypeLi
VarUI4FromStr
SysFreeString
LoadTypeLi
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE