DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5fdea796eeaf0b460b546f9fc5c2235d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5fdea796eeaf0b460b546f9fc5c2235d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5fdea796eeaf0b460b546f9fc5c2235d_JaffaCakes118
Size
160KB
MD5
5fdea796eeaf0b460b546f9fc5c2235d
SHA1
25142d1d64bf835e10ab8941705c06da1d1b13c0
SHA256
885474f91680479fb2f1e08c3ede57bb0404ed1df49685b30fbea66ea7c9ae12
SHA512
15144c8a0a0d557cb968544dcdf1cda2049c2d466ac662c34f0590e7403a323c1e58bdba1ba4382120346dfd8349c33758e0b9e769779ffb95b1a08a013dd4b6
SSDEEP
3072:3uEDx/yzW62CGms+yqiO3LoeVhB341sOWv07omW2/WjB:3uEDx/yzW62CGms+yqxVhBAsPMz/w
Checks for missing Authenticode signature.
resource |
---|
5fdea796eeaf0b460b546f9fc5c2235d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
CreateRemoteThread
WriteProcessMemory
GetProcAddress
VirtualAllocEx
LoadLibraryA
GetModuleFileNameA
GetLocalTime
CreateFileA
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetSystemDirectoryA
GetCurrentProcessId
RaiseException
GetOEMCP
GetACP
ReadFile
SetEndOfFile
SetFilePointer
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
OpenProcess
CloseHandle
SleepEx
GetTickCount
QueryPerformanceCounter
LocalFree
QueryPerformanceFrequency
SetUnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetFileType
GetFileAttributesA
WriteFile
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
HeapAlloc
GetLastError
MultiByteToWideChar
HeapFree
HeapReAlloc
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
LCMapStringW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetWindowPos
SystemParametersInfoA
DefWindowProcA
SetTimer
KillTimer
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
StrStrIA
CoCreateInstance
CoCreateGuid
CoInitialize
GetErrorInfo
VariantInit
SysAllocString
UuidToStringA
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetOpenA
InternetSetOptionA
InternetReadFile
Netbios
SHGetValueA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ