ConfigureCall
CopyStrmPrmToRawObj
CreateFolder
EnumCustomFunctionSettingNext
EnumTvValueRelease
EventSynchronize
FlashImageItemProperty
Free
GetImageFormatAttribute
GetMaximumZoomPos
InitEx
MutexOperation
WGLGetDevice
WriteDevParamToRawEx
Static task
static1
Behavioral task
behavioral1
Sample
72b21bf21568c7231403d689ae7b2e2d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
72b21bf21568c7231403d689ae7b2e2d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
72b21bf21568c7231403d689ae7b2e2d_JaffaCakes118
Size
246KB
MD5
72b21bf21568c7231403d689ae7b2e2d
SHA1
13b4a9afbd6216830722db35c9d759a4e103688e
SHA256
d573fb54a2d1ecca0a3c7ab257d0490f0d9f45cbce4154b235af906860df6e96
SHA512
65ed599536c15fc6b5179429fc93fa40e70ab01b26772b73ffdfab5ece0b5fb82bf3082cc24b2b13ffa91fb4729afeacc1331db16176fd71a03c24173df286ca
SSDEEP
3072:pupWYAQTuPwe9PYdRHA9IbvaaYBh8HnHhL0g3kaG1ELvnBKDozKAa7UT0Vxvk27q:pupWZQTuoWPYLCIzyT8HBLmNQss0M2
Checks for missing Authenticode signature.
resource |
---|
72b21bf21568c7231403d689ae7b2e2d_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteTimerQueueTimer
DisableThreadLibraryCalls
ExitProcess
ExpandEnvironmentStringsW
FindClose
FindFirstFileW
FindNextFileW
FormatMessageA
FormatMessageW
GetACP
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableW
GetFileSize
GetLastError
GetLocalTime
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalFree
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
DeleteCriticalSection
HeapReAlloc
HeapUnlock
HeapWalk
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
LocalReAlloc
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
ReleaseSemaphore
RtlUnwind
SetConsoleTextAttribute
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteFile
DebugBreak
CreateSemaphoreW
CreateSemaphoreA
HeapLock
CloseHandle
RegOpenKeyExA
RegCloseKey
DeregisterEventSource
RegQueryValueExA
SysAllocString
VarBstrFromCy
VarCyFromI2
VarI4FromI1
VarUI2FromUI4
VariantInit
CoGetCallContext
CoInitializeEx
CoTaskMemFree
StgCreatePropStg
CLSIDFromString
ConfigureCall
CopyStrmPrmToRawObj
CreateFolder
EnumCustomFunctionSettingNext
EnumTvValueRelease
EventSynchronize
FlashImageItemProperty
Free
GetImageFormatAttribute
GetMaximumZoomPos
InitEx
MutexOperation
WGLGetDevice
WriteDevParamToRawEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ