DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
618519bbea46f392b3a2d292eb54e926_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
618519bbea46f392b3a2d292eb54e926_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
618519bbea46f392b3a2d292eb54e926_JaffaCakes118
Size
104KB
MD5
618519bbea46f392b3a2d292eb54e926
SHA1
9e903d07ef30601de88f0fbdfbbbb562596769be
SHA256
6259c8c53682e75a6f344d67a56eb42a5334f513172410545421c70ebfcd83e6
SHA512
c9e8679e6f3335bedece944147abb180343a7b9e1f83c6947db362b226ca39be2ef4ddc4a8e0ad980a9b38eaa92b287f284d270cb55c54c4a2396a32dadc931e
SSDEEP
3072:inOQ3d4CsbND26jMql33fLamiq2wTGXuMBo6nTtb:inFd4CcZvMsfOY/ib
Checks for missing Authenticode signature.
resource |
---|
618519bbea46f392b3a2d292eb54e926_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindFirstChangeNotificationA
ReadConsoleA
GetCurrentThread
CancelWaitableTimer
GetVersionExW
WaitForSingleObjectEx
GetSystemDirectoryA
GetVolumeInformationA
GetProfileIntW
DosDateTimeToFileTime
lstrcatA
GetDiskFreeSpaceA
DeleteFileW
SetFileTime
FindResourceExA
CopyFileExW
GetStringTypeExA
IsBadCodePtr
SetProcessShutdownParameters
ReadDirectoryChangesW
GetShortPathNameW
WideCharToMultiByte
RtlMoveMemory
LoadResource
GetNumberFormatW
LockResource
MoveFileExW
SetConsoleTextAttribute
SetInformationJobObject
SetConsoleTitleA
SetFileApisToOEM
OpenEventA
ReadConsoleW
GetThreadPriority
GetLocaleInfoW
FindFirstVolumeMountPointW
lstrlenW
AddAtomA
OpenThread
DeleteTimerQueueEx
SetEnvironmentVariableW
GetVolumeInformationW
LocalHandle
SetVolumeLabelA
GetThreadContext
GetExitCodeProcess
WriteConsoleA
UnlockFile
LocalLock
GetFileSize
lstrcmpA
FileTimeToDosDateTime
UpdateResourceA
LocalFileTimeToFileTime
SetFilePointer
GlobalFindAtomW
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextFileW
Beep
GetSystemWow64DirectoryW
SetWaitableTimer
DeleteTimerQueueTimer
SearchPathA
GetFileAttributesExW
GetCommandLineW
CreateWaitableTimerW
SetFilePointerEx
SuspendThread
ProcessIdToSessionId
GetBinaryTypeW
CreateDirectoryW
GetFullPathNameW
LocalReAlloc
GetCurrentProcess
FindNextFileA
SetHandleCount
GetSystemDirectoryW
ExitThread
FillConsoleOutputCharacterW
GetTapeParameters
GlobalAddAtomA
GetUserDefaultLangID
GetVolumePathNamesForVolumeNameW
QueueUserWorkItem
GetFileTime
GetEnvironmentStrings
SleepEx
GetStdHandle
RegisterWaitForSingleObjectEx
CompareFileTime
TerminateJobObject
LCMapStringW
MultiByteToWideChar
ReadFileEx
HeapSetInformation
SizeofResource
CreateIoCompletionPort
PostQueuedCompletionStatus
GetSystemWindowsDirectoryA
lstrcpyA
SetConsoleActiveScreenBuffer
GetTimeZoneInformation
GlobalGetAtomNameA
GetDriveTypeW
CallNamedPipeA
FindResourceW
DeleteCriticalSection
GetProfileIntA
GetNumberFormatA
SetConsoleWindowInfo
CreateFileW
VirtualAlloc
SetConsoleScreenBufferSize
GetSystemDefaultLangID
IsProcessorFeaturePresent
AreFileApisANSI
SetNamedPipeHandleState
EnumResourceNamesA
AddAtomW
InterlockedExchange
InitializeCriticalSection
CopyFileA
ReleaseMutex
GetModuleHandleA
GetProcAddress
HeapFree
GetComputerNameA
VirtualQuery
GlobalAlloc
CreateMutexA
GetCurrentProcessId
GetModuleFileNameA
InterlockedIncrement
CloseHandle
DeleteFileA
GetLastError
ExpandEnvironmentStringsA
MoveFileA
WaitForSingleObject
GetSystemTimeAsFileTime
GetTickCount
WriteFile
CreateFileA
EnterCriticalSection
UnmapViewOfFile
ReadFile
Sleep
LoadLibraryA
GetProcessHeap
GetConsoleMode
LeaveCriticalSection
GetEffectiveRightsFromAclW
OpenProcessToken
ReportEventA
DuplicateTokenEx
RegCreateKeyW
StartServiceCtrlDispatcherW
MakeSelfRelativeSD
ReadEventLogA
CreateServiceA
RegNotifyChangeKeyValue
SetTokenInformation
RegReplaceKeyW
RegDeleteKeyA
DeregisterEventSource
QueryServiceConfigW
StartServiceW
SetEntriesInAclW
GetUserNameA
RegLoadKeyA
CreateProcessAsUserA
RegCreateKeyA
QueryServiceConfigA
GetOldestEventLogRecord
RegLoadKeyW
QueryServiceConfig2W
CloseServiceHandle
ChangeServiceConfigA
RegUnLoadKeyW
ClearEventLogW
ControlService
RegDeleteValueA
OpenServiceW
EnumDependentServicesA
EnumServicesStatusA
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegSetValueExA
LookupAccountNameA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegisterServiceCtrlHandlerExA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ