DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5cfe4bdcd8f77892dbca4b38349e1dac_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5cfe4bdcd8f77892dbca4b38349e1dac_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5cfe4bdcd8f77892dbca4b38349e1dac_JaffaCakes118
Size
306KB
MD5
5cfe4bdcd8f77892dbca4b38349e1dac
SHA1
4fc36ca29d579613285cbc2dfa8e8d9cbb099600
SHA256
e344b045157adf0894c72f0e6517411843296e08f587cf4a17aad53d435e67ee
SHA512
a3a9d868dcbb16996703dd1889a9e81eb839d4347b74905235b69d8ddb9b8a842e5e4161f3ab4a459ec496a45d1a3bda46cd54da646975ab74df5244efa06c35
SSDEEP
6144:KLCCrn2svZjmbe1iMua83zpV0VsjmwHApnX3DuhLAOabNiEY:zCrnPBZX839V0VsjmwHWnX3CFobMV
Checks for missing Authenticode signature.
resource |
---|
5cfe4bdcd8f77892dbca4b38349e1dac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImageList_Add
ImageList_Destroy
ImageList_GetIconSize
ImageList_Create
IsThemeActive
IsNetworkAlive
GetCurrentThreadId
LockResource
FindResourceExW
Beep
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpW
MulDiv
OutputDebugStringW
CloseHandle
CreateMutexW
WaitForSingleObject
ReleaseMutex
CreateEventW
SetEvent
ResetEvent
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCurrentProcessId
lstrcpynW
WaitForMultipleObjects
GetVersionExW
HeapAlloc
GetProcessHeap
FormatMessageW
CreateFileW
ResumeThread
TerminateThread
Sleep
CreateThread
SetFilePointer
FlushFileBuffers
WriteFile
WideCharToMultiByte
ReleaseSemaphore
CreateSemaphoreW
SetUnhandledExceptionFilter
VirtualQuery
IsBadWritePtr
GetCurrentThread
GetTickCount
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetCurrentProcess
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
LCMapStringA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapCreate
GetCommandLineA
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
RtlUnwind
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
FlushInstructionCache
GetThreadLocale
SetThreadLocale
FindResourceW
LoadLibraryW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
InterlockedDecrement
InterlockedIncrement
LoadLibraryExW
OutputDebugStringA
SetLastError
GetModuleFileNameW
SetStdHandle
UnregisterClassA
CharNextW
CallWindowProcW
SetWindowLongW
GetWindowLongW
GetClientRect
IsWindow
LoadCursorW
DestroyWindow
RegisterClassExW
GetClassInfoExW
CreateWindowExW
DefWindowProcW
ShowWindow
DispatchMessageW
TranslateMessage
CharLowerBuffW
CopyRect
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
SetTimer
KillTimer
MapWindowPoints
GetWindowRect
IsWindowVisible
CreatePopupMenu
AppendMenuW
SetMenuItemBitmaps
TrackPopupMenu
GetKeyState
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
DestroyMenu
CreateAcceleratorTableW
GetWindow
SetFocus
DestroyAcceleratorTable
GetDesktopWindow
BeginPaint
EndPaint
FillRect
ReleaseCapture
GetClassNameW
GetDlgItem
GetParent
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
SetWindowPos
MoveWindow
GetSysColor
GetFocus
IsChild
ClientToScreen
PostMessageW
SendMessageW
OffsetRect
ValidateRect
GetStockObject
CreateSolidBrush
GetDeviceCaps
CreateCompatibleBitmap
DeleteObject
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
OffsetWindowOrgEx
SetWindowOrgEx
GetObjectW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
OpenProcessToken
GetTokenInformation
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
CoUninitialize
CreateItemMoniker
StringFromCLSID
GetRunningObjectTable
OleUninitialize
OleInitialize
CLSIDFromString
CoInitialize
CoGetClassObject
OleLockRunning
CreateStreamOnHGlobal
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CLSIDFromProgID
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
VariantInit
VariantClear
DispCallFunc
LoadRegTypeLi
VarBstrCmp
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
OleCreateFontIndirect
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ