DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5ff5bf73394a8762d6b711cfd7af1c02_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ff5bf73394a8762d6b711cfd7af1c02_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ff5bf73394a8762d6b711cfd7af1c02_JaffaCakes118
Size
128KB
MD5
5ff5bf73394a8762d6b711cfd7af1c02
SHA1
87cfe1e52a8e4afd2510747c6df017dc22080da7
SHA256
4a7b96f723a59ce70cd3131e3891392f58722ecf22c57ba3c07b15b8ffe9ca33
SHA512
118b78d5de0feabff9fd010684bd72d921f92b37548a5e64c1b42582bf2898616a349a050e07e8be37acc8864c13e5dc114338d255d1869d440d7d5659535efb
SSDEEP
1536:8zY+bRViEOVYs/SOfIoAwT3OvQ7MUqT9PVCP3SjN/jjAwdWpUPwwdltKMuA29Osm:8zPbdGwo9T4UMUgTCWugWpkLlQp9sOl
Checks for missing Authenticode signature.
resource |
---|
5ff5bf73394a8762d6b711cfd7af1c02_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord823
ord825
RtlIpv4StringToAddressW
RtlIpv6StringToAddressW
RtlCompareMemory
ExpandEnvironmentStringsA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
GlobalFree
GlobalAlloc
lstrcmpiW
lstrcmpW
LoadLibraryA
GetModuleHandleA
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
InterlockedExchange
Sleep
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyExW
GetWindowLongW
IsDlgButtonChecked
CheckDlgButton
EnableWindow
DefWindowProcW
SendDlgItemMessageW
SetDlgItemInt
SetDlgItemTextW
PostMessageW
SetFocus
SetWindowLongW
GetDlgItemTextW
GetDlgItem
SendMessageW
GetDlgItemInt
GetParent
BringWindowToTop
LoadIconW
LoadStringW
RegisterClipboardFormatW
MessageBoxW
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
CreateStreamOnHGlobal
InternetCrackUrlW
InternetCanonicalizeUrlW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ