DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
639afed7e1dd9bd8694fc01f673cf68b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
639afed7e1dd9bd8694fc01f673cf68b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
639afed7e1dd9bd8694fc01f673cf68b_JaffaCakes118
Size
2.7MB
MD5
639afed7e1dd9bd8694fc01f673cf68b
SHA1
77553a22c50ae3ed962e9532a955ee1cf796b4b3
SHA256
aa53c0cfafca41e027b7883801fab0d4eed03f9b002f08c8a3b97fafe14e2b9f
SHA512
627408b1269273dc84a7df9d887a4ff75bbc52fd6eb11f3342eff437d904f872643efe99172c9fe36faa279aca5943e4c236b31eaef9b0df4c3c229049f09fe3
SSDEEP
49152:oN3IS6unO1i+yTvjO9F5UF2vsx28lA+v6+FllFMQINGTDreP9FrQaN2:o0un2i9TvGF5U528lAr2MQvDr4H8aE
Checks for missing Authenticode signature.
resource |
---|
639afed7e1dd9bd8694fc01f673cf68b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
CreateTimerQueue
HeapLock
PurgeComm
TryEnterCriticalSection
ExitThread
BackupRead
EnterCriticalSection
WaitForMultipleObjectsEx
lstrcpynA
GetProfileStringA
LCMapStringW
ExpandEnvironmentStringsA
FormatMessageW
HeapAlloc
RtlMoveMemory
TerminateProcess
SystemTimeToFileTime
LocalFlags
CreateMailslotW
GlobalFindAtomA
GetFileSizeEx
GetLocalTime
GetThreadLocale
FindFirstFileA
AddRefActCtx
GetModuleHandleW
SetEvent
GetTickCount
GetLastError
LocalSize
RtlUnwind
GetLogicalDrives
lstrcmpA
LoadLibraryA
GetCommModemStatus
GetAtomNameA
AddAtomW
GlobalFlags
LCMapStringA
InterlockedExchangeAdd
CreateToolhelp32Snapshot
TerminateThread
GetProcessHeap
GetTimeFormatW
ReadDirectoryChangesW
GlobalAddAtomW
GetProcAddress
CoQueryProxyBlanket
FreePropVariantArray
OleRegGetUserType
CoMarshalInterface
CoDisconnectObject
StgIsStorageILockBytes
CoLockObjectExternal
OleGetAutoConvert
CoSwitchCallContext
CharNextA
BroadcastSystemMessageW
GetAsyncKeyState
DialogBoxIndirectParamA
GetMenuCheckMarkDimensions
GetSystemMetrics
DefDlgProcW
SetWindowsHookExA
ScreenToClient
GetUpdateRgn
BeginDeferWindowPos
TrackPopupMenuEx
BeginPaint
AllowSetForegroundWindow
CopyImage
OpenDesktopW
DrawMenuBar
PtInRect
DestroyCursor
CreateDialogIndirectParamA
GetActiveWindow
CharUpperW
CloseDesktop
IsDialogMessageW
SetPropA
DrawAnimatedRects
DispatchMessageA
GetDlgItemTextW
ReleaseDC
DrawStateA
GetParent
GetUpdateRect
GrayStringA
GetTopWindow
MessageBoxA
AppendMenuW
SysAllocString
SysAllocStringByteLen
StrDupA
PathBuildRootW
PathUndecorateW
PathIsDirectoryW
SHRegGetValueW
PathRemoveFileSpecA
StrFormatByteSizeW
PathGetArgsW
PathAddBackslashW
PathStripToRootW
SetEntriesInAclW
ChangeServiceConfigA
LockServiceDatabase
RegOpenCurrentUser
RegCloseKey
SaferGetLevelInformation
GetUserNameA
RegisterServiceCtrlHandlerW
RegDisablePredefinedCache
UnlockServiceDatabase
RegEnumValueA
SaferCloseLevel
CreateProcessAsUserA
ChangeServiceConfigW
RegQueryValueW
BuildTrusteeWithNameW
CredDeleteW
SHAppBarMessage
SHGetPathFromIDListW
SHFormatDrive
SHGetFolderPathAndSubDirW
SHGetFileInfoA
ShellAboutW
CommandLineToArgvW
DragAcceptFiles
CreateBitmap
SetSystemPaletteUse
EnumFontsA
DeleteObject
SetMiterLimit
CreateFontIndirectA
GetMetaFileA
SetTextCharacterExtra
ScaleWindowExtEx
GetWorldTransform
SelectObject
EnumFontFamiliesExW
GetBrushOrgEx
GetRandomRgn
SetStretchBltMode
EnumEnhMetaFile
GetKerningPairsA
GetRegionData
PtInRegion
GetNearestColor
ScaleViewportExtEx
EnumMetaFile
SetWindowExtEx
StrokeAndFillPath
GetBkColor
GetGraphicsMode
GetTextCharset
GetCharABCWidthsW
GetBitmapDimensionEx
GetTextAlign
CreateCompatibleBitmap
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ