DllAction
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5e787f2524b5806e1be33a91524f8884_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e787f2524b5806e1be33a91524f8884_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e787f2524b5806e1be33a91524f8884_JaffaCakes118
Size
765KB
MD5
5e787f2524b5806e1be33a91524f8884
SHA1
935a6248f680d2dcab489a2837660ed1a87737e5
SHA256
591314f386f4cbae3fc03b26483e9c807973e2bad4e0816e93bc45aa662f1f5c
SHA512
14ec49386feae746ac10077bbea26a45873c5587fe42b5a45c2242afa2528e30006b412e9fde6f564b1dccbdb61963013982be21960419757ea501664a9715b6
SSDEEP
12288:RbralTuPJgY2kIS7LW4geEoz0hnwTzk6PhwK0+Z41ugQE4MYeQOz:RbelkJgY2kI2iDph8Q65pBZEugpg8
Checks for missing Authenticode signature.
resource |
---|
5e787f2524b5806e1be33a91524f8884_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHDeleteValueW
SHGetValueW
LocalHandle
WriteConsoleW
GetConsoleOutputCP
GetProcAddress
LoadLibraryA
GetProcessHeap
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
DefineDosDeviceA
GetPrivateProfileStructW
VerifyVersionInfoW
GetStartupInfoA
GlobalGetAtomNameW
lstrcmpW
GetProfileStringW
ExpandEnvironmentStringsA
SearchPathW
CreateMailslotA
ReadFileScatter
FindNextFileW
OpenMutexW
FindAtomW
MultiByteToWideChar
GetEnvironmentVariableA
OutputDebugStringW
lstrcmpA
GetEnvironmentStringsW
GetProcessWorkingSetSize
WriteProfileSectionW
DosDateTimeToFileTime
HeapCreate
EraseTape
SetVolumeLabelA
IsBadStringPtrW
BeginUpdateResourceA
OpenFileMappingW
LocalSize
UnmapViewOfFile
ConnectNamedPipe
FindFirstChangeNotificationA
GetEnvironmentVariableW
FindCloseChangeNotification
lstrcpyA
lstrlenW
BackupWrite
DeleteFileW
GetProcessPriorityBoost
SetFileShortNameW
GetProcessShutdownParameters
WriteProfileStringW
GetCommModemStatus
ReleaseMutex
GetNumaNodeProcessorMask
MoveFileExW
LockResource
CreateDirectoryExA
LockFile
MapViewOfFileEx
GetPrivateProfileSectionNamesW
GetComputerNameA
ReadFileEx
GetProcessTimes
GlobalMemoryStatus
GetTapeStatus
GetProfileIntA
lstrcmpiW
TransactNamedPipe
ExitThread
GetSystemWindowsDirectoryW
GlobalUnlock
GetThreadPriority
MulDiv
SetComputerNameA
GetStdHandle
GetDiskFreeSpaceExW
BuildCommDCBAndTimeoutsA
CreateFileMappingW
GetVersionExW
FormatMessageA
GetFileSizeEx
CreateTapePartition
GetMailslotInfo
RemoveDirectoryW
BuildCommDCBAndTimeoutsW
CreateProcessW
CreateEventA
GetSystemTimeAsFileTime
SetTimeZoneInformation
CreateMutexW
CreateMailslotW
MoveFileW
GetLongPathNameW
GetSystemInfo
FreeResource
GetPrivateProfileSectionW
CreateEventW
GetFileAttributesExW
WritePrivateProfileSectionW
ReadFile
GetNamedPipeInfo
GetFileAttributesW
EnumResourceLanguagesW
HeapReAlloc
SetFileAttributesA
LocalAlloc
GetCommandLineW
GetLogicalDriveStringsA
SetFirmwareEnvironmentVariableA
HeapQueryInformation
SetFileApisToANSI
WaitForMultipleObjectsEx
CreateFileW
GetProfileSectionW
MoveFileExA
GetNumaAvailableMemoryNode
lstrcatA
WinExec
GetFileAttributesExA
WritePrivateProfileStringW
BeginUpdateResourceW
OpenThread
GetPrivateProfileStringA
DisconnectNamedPipe
UnhandledExceptionFilter
FlushFileBuffers
SetEnvironmentVariableA
TzSpecificLocalTimeToSystemTime
CancelIo
SetUnhandledExceptionFilter
CreateFileA
GetNumaHighestNodeNumber
GetStartupInfoW
GetBinaryTypeA
GetCommProperties
UnlockFile
EnumResourceNamesA
FindResourceW
OpenEventA
LoadLibraryExA
GetPrivateProfileStringW
ExpandEnvironmentStringsW
OpenEventW
GetSystemTime
ClearCommError
LocalShrink
DefineDosDeviceW
EndUpdateResourceA
WriteFileGather
CreateDirectoryExW
GetPrivateProfileIntA
GetThreadSelectorEntry
EnumResourceLanguagesA
SetProcessPriorityBoost
VirtualAllocEx
CloseHandle
CreateProcessA
GetComputerNameW
UpdateResourceW
InitAtomTable
ReadProcessMemory
LocalFree
OutputDebugStringA
AreFileApisANSI
SetTapeParameters
OpenFileMappingA
IsBadHugeWritePtr
FormatMessageW
BuildCommDCBW
ExitProcess
GetAtomNameA
MapViewOfFile
lstrcpynW
GetLogicalDrives
GetVersion
WritePrivateProfileStringA
GetPrivateProfileIntW
GlobalMemoryStatusEx
GetModuleFileNameA
SetComputerNameW
SetHandleCount
FreeEnvironmentStringsA
SetEndOfFile
SetLocalTime
GetDriveTypeA
CreateSemaphoreA
IsSystemResumeAutomatic
GetFullPathNameW
FindResourceA
FlushInstructionCache
CreateDirectoryW
GetProfileIntW
OpenFile
FindFirstChangeNotificationW
GetVersionExA
GetHandleInformation
CommConfigDialogW
InterlockedExchange
GlobalHandle
GetLogicalDriveStringsW
CreateIoCompletionPort
HeapAlloc
GetTapeParameters
lstrcpyW
GetTempPathW
GetCurrentDirectoryW
EndUpdateResourceW
GetCommandLineA
SetPriorityClass
FileTimeToLocalFileTime
SetDefaultCommConfigW
InterlockedCompareExchange
GetDefaultCommConfigA
GetDiskFreeSpaceExA
GetProcessId
GetCommConfig
EnumResourceTypesW
GetShortPathNameA
GetCurrentProcessId
GetNamedPipeHandleStateW
GetWindowsDirectoryW
TerminateProcess
SetFirmwareEnvironmentVariableW
GetModuleHandleA
SetCurrentDirectoryA
HeapSize
PulseEvent
GetCurrentThreadId
OpenMutexA
WaitNamedPipeW
GlobalUnfix
FindResourceExW
Beep
GetPrivateProfileStructA
GetCommMask
SetStdHandle
GetSystemWindowsDirectoryA
HeapFree
GetTimeZoneInformation
LoadModule
SetProcessWorkingSetSize
SetCommBreak
GlobalLock
ContinueDebugEvent
AddAtomW
GetProcessAffinityMask
GlobalAlloc
WriteProcessMemory
HeapWalk
GetModuleFileNameW
TlsAlloc
UnlockFileEx
OpenSemaphoreW
QueryPerformanceCounter
SetProcessShutdownParameters
SystemTimeToTzSpecificLocalTime
GetDefaultCommConfigW
GetCompressedFileSizeA
HeapCompact
DebugActiveProcess
LocalFileTimeToFileTime
IsBadHugeReadPtr
LoadLibraryExW
LockFileEx
GetVolumeInformationW
FreeEnvironmentStringsW
GetThreadTimes
EscapeCommFunction
VirtualAlloc
LocalUnlock
GetVolumeInformationA
GetPriorityClass
CopyFileW
FlushViewOfFile
AddAtomA
SetVolumeLabelW
GetFirmwareEnvironmentVariableW
GlobalGetAtomNameA
GetBinaryTypeW
GetDiskFreeSpaceW
FreeLibraryAndExitThread
GetQueuedCompletionStatus
DebugActiveProcessStop
SetEvent
PeekNamedPipe
FatalAppExitW
GetDriveTypeW
GetProcessIoCounters
GetExitCodeThread
FindClose
GetModuleHandleW
GetSystemDirectoryW
GetTempFileNameW
InterlockedDecrement
GetSystemDirectoryA
RaiseException
FreeLibrary
DeleteFileA
CreateSemaphoreW
CallNamedPipeW
EnumResourceNamesW
WaitForSingleObject
GetLastError
TransmitCommChar
GlobalAddAtomW
DeleteAtom
GetCurrentDirectoryA
WriteFile
SetThreadExecutionState
BackupRead
GetCommTimeouts
IsBadWritePtr
LoadLibraryW
IsBadReadPtr
lstrcmpiA
GlobalSize
SetMailslotInfo
LocalReAlloc
GlobalAddAtomA
GlobalFix
GlobalReAlloc
SetThreadPriority
GetFileInformationByHandle
FatalExit
SetFileApisToOEM
SetSystemPowerState
HeapValidate
InterlockedExchangeAdd
FindFirstFileW
DebugBreak
SetCurrentDirectoryW
MoveFileA
GetWindowsDirectoryA
GetSystemTimeAdjustment
DeviceIoControl
GetProfileStringA
DisableThreadLibraryCalls
TlsFree
SystemTimeToFileTime
GetFileTime
lstrcatW
CreateFileMappingA
GetCurrentThread
WriteTapemark
CreatePipe
CommConfigDialogA
WaitCommEvent
SetThreadAffinityMask
WaitForMultipleObjects
VerifyVersionInfoA
GetWriteWatch
FindFirstFileA
GlobalFindAtomA
SetHandleInformation
GlobalFlags
CreateNamedPipeW
GetFileType
FindResourceExA
GetShortPathNameW
OpenSemaphoreA
GetFileAttributesA
VirtualQuery
VirtualProtect
ResumeThread
GetCurrentProcess
GetThreadContext
SetThreadContext
SuspendThread
SetLastError
WriteConsoleA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetTickCount
VirtualFree
HeapDestroy
WideCharToMultiByte
GetEnvironmentStrings
Sleep
InterlockedIncrement
TlsSetValue
TlsGetValue
IsDebuggerPresent
RtlUnwind
GetDlgItem
SetActiveWindow
GetWindowThreadProcessId
GetWindowRect
GetWindowTextA
ClientToScreen
RealGetWindowClassA
GetParent
SendMessageW
SetWindowTextW
PeekMessageW
TranslateMessage
GetWindowLongW
MsgWaitForMultipleObjects
SendMessageA
CharLowerW
CreateDialogParamW
CharUpperW
SetWindowLongW
EnumChildWindows
DestroyWindow
CreateDialogParamA
GetWindowLongA
GetPropA
BringWindowToTop
SetWindowLongA
RemovePropW
RealGetWindowClassW
RemovePropA
GetPropW
DispatchMessageW
GetClassNameA
PostMessageW
GetClassNameW
GetClientRect
GetWindowTextW
MoveWindow
SetPropA
OffsetRect
IntersectRect
SetPropW
InflateRect
SysAllocString
SysFreeString
SysStringLen
VarCmp
VariantCopy
VariantInit
VariantChangeType
VariantClear
DllAction
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ