DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5f9f56d4b5b9a2a47d44e4ad0ffc6a6a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f9f56d4b5b9a2a47d44e4ad0ffc6a6a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5f9f56d4b5b9a2a47d44e4ad0ffc6a6a_JaffaCakes118
Size
153KB
MD5
5f9f56d4b5b9a2a47d44e4ad0ffc6a6a
SHA1
fc72f79a324b4a3bacc570c54e3832138686c6b5
SHA256
9d88b41de74b0ce54427cb64b9e4fccadbc747e2ab1ec3bde304d7c13799c1b0
SHA512
b2f329c8052d0d2970419e4ce57d64db7ea58978c687e0e18a07fc60ba31be4225b68dcb38f1a19346983b20a35b5afef6b867156c7fe0aa1ad0c2da6c574890
SSDEEP
1536:AB12XxBbKzjgvE/UzccpfWiXuX+TLR19kMe4ZNqeISUz9kmy7tmRI2kxcuhXnufm:AGKAZHdj/LZNA78jxcuhXWyk25ObVBo
Checks for missing Authenticode signature.
resource |
---|
5f9f56d4b5b9a2a47d44e4ad0ffc6a6a_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UuidToStringW
RpcStringFreeW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
StrStrIW
PathStripPathW
StrCmpIW
SHDeleteKeyW
SHSetValueW
UrlEscapeW
GetConsoleMode
GetConsoleCP
lstrlenW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
CloseHandle
CreateProcessW
GetProcAddress
LoadLibraryW
ExitThread
WaitForSingleObject
CreateThread
Sleep
GetModuleFileNameW
OpenMutexW
GetSystemTime
CreateEventW
OpenProcess
CreateMutexW
GlobalFree
GlobalAlloc
LocalFree
LocalAlloc
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpW
SystemTimeToFileTime
GetLocalTime
LoadLibraryA
FreeLibrary
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
MultiByteToWideChar
GetTempFileNameW
GetTickCount
GetEnvironmentVariableW
VirtualQuery
GetVolumeInformationW
GetWindowsDirectoryW
GetSystemInfo
SetFilePointer
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapSize
GetLocaleInfoA
LCMapStringA
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
ExpandEnvironmentStringsW
GetModuleHandleA
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
HeapAlloc
HeapFree
GetCommandLineA
GetCurrentThreadId
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
RaiseException
TerminateProcess
GetWindowTextW
EnumChildWindows
RealGetWindowClassW
CallWindowProcW
SetWindowLongW
SetPropW
GetWindowThreadProcessId
SetWindowPos
SetActiveWindow
SetCursorPos
SendMessageW
SendInput
RemovePropW
SetWindowTextW
EnumWindows
GetWindowInfo
GetWindowRect
PeekMessageW
MsgWaitForMultipleObjects
GetPropW
DispatchMessageW
GetSystemMetrics
GetCursorPos
GetClassNameW
PostMessageW
TranslateMessage
CryptGetHashParam
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityInfo
CryptGenRandom
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext
RegQueryValueExW
RegCreateKeyW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
CoInitializeEx
CoCreateInstance
CoUninitialize
CoTaskMemFree
VariantChangeType
VariantCopy
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
SysAllocString
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ