DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5b9605aa21cf1bb6e21515c6bb6ddefc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b9605aa21cf1bb6e21515c6bb6ddefc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5b9605aa21cf1bb6e21515c6bb6ddefc_JaffaCakes118
Size
236KB
MD5
5b9605aa21cf1bb6e21515c6bb6ddefc
SHA1
9106b405c0959705b932a4e28c6733ac3e7e0204
SHA256
cf777d5fb37a99d5f46eca5a0ecd66bedf7731d856779821b6f12efb249be3f3
SHA512
6ff9c8880ede66ea901dc0640cefbe62ffe0d0dad5949ba90e1bb5f55b614dab2142e4356c83112d6e1c4690e3abf4798c4db0f282db1b4d5a1fe7a81f411a8e
SSDEEP
3072:ART+V0SFseNgnBRVP05ksNPw6TrsAkZ9oJcJa8aPgZAk1NhvtRATk:Ad+VdFse6RVPEkMwMTcdbZAk1NZGk
Checks for missing Authenticode signature.
resource |
---|
5b9605aa21cf1bb6e21515c6bb6ddefc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
FreeLibrary
lstrcmpiW
LoadLibraryExW
GetModuleHandleW
CreateFileW
DeleteFileA
FlushFileBuffers
GetCurrentProcessId
GetFileAttributesW
GetLastError
VirtualQuery
LoadLibraryW
GetProcAddress
lstrlenA
lstrcpyA
GetTempPathA
GetTempFileNameW
WideCharToMultiByte
CreateMutexW
GetCurrentProcess
GlobalLock
OpenProcess
Sleep
lstrcmpW
GlobalUnlock
EnterCriticalSection
InterlockedExchangeAdd
DuplicateHandle
ReadFile
SetFilePointer
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
MultiByteToWideChar
RaiseException
DeleteCriticalSection
FindResourceExW
LoadResource
LockResource
GetVersionExW
SizeofResource
GetModuleFileNameW
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
GetModuleHandleA
GetModuleFileNameA
FindResourceW
lstrlenW
OpenMutexW
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
GetCommandLineA
GetCurrentThreadId
GetSystemInfo
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
GetConsoleMode
GetConsoleCP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
GetStartupInfoA
SetHandleCount
GetFileType
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
GetStdHandle
HeapCreate
VirtualFree
ExitProcess
SetLastError
HeapAlloc
HeapDestroy
TlsFree
SetWindowLongW
SetTimer
KillTimer
GetParent
CallWindowProcW
CharNextW
UnhookWindowsHookEx
GetWindow
GetClassNameW
FindWindowExW
GetWindowLongW
GetKeyboardLayout
GetTopWindow
SendMessageW
UnregisterClassA
PtInRect
RegisterWindowMessageW
DeleteObject
StretchBlt
SelectObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
GetObjectW
GetDIBColorTable
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
SHGetSpecialFolderPathW
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
SysAllocString
VariantChangeType
SysReAllocStringLen
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
DispCallFunc
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetVartype
LoadRegTypeLi
SysStringLen
VarBstrCat
VarBstrCmp
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VariantCopy
VariantClear
VariantInit
SysFreeString
VarUI4FromStr
LoadTypeLi
PathFindExtensionW
GdipCreateBitmapFromScan0
GdiplusStartup
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipFree
GdiplusShutdown
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipAlloc
GdipCloneImage
TransparentBlt
AlphaBlend
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ