CreateUSD
DeleteUSD
DllCanUnloadNow
DllGetClassObject
DllMain
Static task
static1
Behavioral task
behavioral1
Sample
69133eb1c38f4a789b3f59e9c899b398_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69133eb1c38f4a789b3f59e9c899b398_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
69133eb1c38f4a789b3f59e9c899b398_JaffaCakes118
Size
246KB
MD5
69133eb1c38f4a789b3f59e9c899b398
SHA1
b27f3c051cb649ffb9a2a88e290efdda7611911b
SHA256
216e242ee48a337a2488e1f64f16c8cc853a131d3d4ed6c4e2a9b29ff2726a42
SHA512
6b3892695d79f17875d748a5d298e44ff9bddef5d990bdb31c2d8842c53da3483d805b9730379344fc2ad1b203b3280a2808a7535cf6157f8fbb89c7546c931a
SSDEEP
3072:TtjE7tP86b61c5XBSmf3KeHIpq5P5uQSXr7rm//XAns+7b9xii0PpelMExwZKlL+:TR4hnUc5xd3upq5BuQ2rc2PbFCelM
Checks for missing Authenticode signature.
resource |
---|
69133eb1c38f4a789b3f59e9c899b398_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord823
ord825
GetVersion
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
OutputDebugStringA
InterlockedCompareExchange
InterlockedExchange
DisableThreadLibraryCalls
GetTempPathA
lstrlenA
MultiByteToWideChar
CreateThread
ExitThread
SetEvent
TerminateThread
ResetEvent
CreateFileA
ReadFile
lstrcmpA
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
WaitForSingleObject
ReleaseMutex
OpenMutexA
GetProcessHeap
HeapAlloc
CreateMutexA
HeapFree
InitializeCriticalSection
CreateEventA
WideCharToMultiByte
GetWindowsDirectoryA
GetSystemDefaultLangID
Sleep
GetModuleHandleA
GlobalAlloc
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
CloseHandle
GlobalFree
RegCreateKeyExA
RegDeleteValueA
RegFlushKey
RegSetValueExA
RegEnumValueA
RegQueryValueExA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegCloseKey
CoTaskMemFree
CoTaskMemAlloc
SysFreeString
SysAllocString
CreateUSD
DeleteUSD
DllCanUnloadNow
DllGetClassObject
DllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ