DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
73c56b67cde9fc286c21a9db4e985a64_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
73c56b67cde9fc286c21a9db4e985a64_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
73c56b67cde9fc286c21a9db4e985a64_JaffaCakes118
Size
104KB
MD5
73c56b67cde9fc286c21a9db4e985a64
SHA1
4d362769c564ebb5f4e9097c49e9f71cb56b3f80
SHA256
669efd43aef27d963a06517e36cd97b1aa11861f0498241043e1b47809a225d2
SHA512
c6d1a9b14cc17036486f8dadac2786618e414370f1114ef9253f3fd35e4834dd192f88fea8da0e05dc55b0762f6f0445095f14593e2f4743eca8b33590793f43
SSDEEP
3072:jLCudzzegDgxXee5/Umz2lG32ER47BVFOq0K10C8Rn:j/z45/Uk2M3Q7JOFKw
Checks for missing Authenticode signature.
resource |
---|
73c56b67cde9fc286c21a9db4e985a64_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GetModuleHandleA
GetCurrentProcessId
MapViewOfFile
CopyFileA
GetProcAddress
EnterCriticalSection
HeapAlloc
InterlockedExchange
MoveFileA
InitializeCriticalSection
CreateMutexA
LocalFree
WriteFile
GetProcessHeap
GetModuleFileNameA
LoadLibraryA
UnmapViewOfFile
GetLastError
InterlockedIncrement
InterlockedDecrement
ReleaseMutex
GetSystemTimeAsFileTime
CreateThread
HeapFree
CreateDirectoryA
DeleteFileA
VirtualProtect
LeaveCriticalSection
CreateProcessA
GetSystemPowerStatus
SetTimeZoneInformation
GlobalFindAtomA
WriteConsoleA
ReadConsoleInputW
SetEvent
GetProfileStringW
OpenFileMappingA
GetDateFormatW
GetHandleInformation
FindResourceA
GlobalAddAtomA
SetFileAttributesA
LocalReAlloc
EscapeCommFunction
GetLargestConsoleWindowSize
SetProcessWorkingSetSize
SetEnvironmentVariableA
FindResourceExA
IsBadStringPtrA
GetCurrentProcess
GetVolumeInformationW
GetEnvironmentStrings
GetSystemWindowsDirectoryA
GetCurrentDirectoryA
GetDriveTypeW
lstrcmpW
VirtualAlloc
GetStartupInfoW
HeapValidate
GetSystemWow64DirectoryW
MoveFileExW
GetStringTypeExW
OpenFile
RemoveDirectoryW
ResumeThread
GetCommandLineW
EnumResourceLanguagesA
GetVolumePathNameW
GetConsoleMode
SetVolumeLabelW
DeleteTimerQueueEx
FileTimeToLocalFileTime
IsValidCodePage
GetEnvironmentVariableA
SetVolumeMountPointW
WriteProfileStringW
GetTempPathA
lstrlenW
CreateTimerQueue
GetConsoleScreenBufferInfo
InterlockedCompareExchange
SetComputerNameA
FindNextFileA
FindAtomA
FindNextVolumeMountPointW
QueryPerformanceFrequency
SetConsoleCursorPosition
GetTapeParameters
GetConsoleCP
ExitProcess
GetLongPathNameW
FindFirstVolumeW
SetErrorMode
VerifyVersionInfoW
OpenEventW
GetSystemTimeAdjustment
GetShortPathNameW
FindCloseChangeNotification
GetProfileIntW
SleepEx
OpenMutexA
FlushConsoleInputBuffer
RegisterWaitForSingleObjectEx
GetThreadLocale
HeapWalk
IsBadStringPtrW
OpenSemaphoreA
FindFirstChangeNotificationW
GetSystemDefaultUILanguage
OpenThread
CreateConsoleScreenBuffer
GetNumberFormatW
ReadDirectoryChangesW
GetDiskFreeSpaceExW
CreateRemoteThread
FindFirstVolumeMountPointW
FreeLibraryAndExitThread
GetWindowsDirectoryA
WriteConsoleInputA
GlobalReAlloc
CompareStringW
GetCompressedFileSizeW
SetDefaultCommConfigW
GetConsoleOutputCP
DosDateTimeToFileTime
GetStringTypeExA
FreeEnvironmentStringsW
FormatMessageW
FindResourceW
FileTimeToDosDateTime
CreateSemaphoreA
SetFilePointer
GlobalFree
VerSetConditionMask
RemoveDirectoryA
Beep
LCMapStringW
GetFileAttributesA
RaiseException
GetComputerNameExW
HeapCompact
WaitForMultipleObjects
GetVersionExA
CoSetProxyBlanket
CoFileTimeNow
OleRegGetUserType
BindMoniker
StringFromIID
OleTranslateAccelerator
CreateFileMoniker
CoLockObjectExternal
CoGetMarshalSizeMax
OleRun
CreateDataAdviseHolder
StringFromGUID2
RevokeDragDrop
CoGetObjectContext
OleCreateLink
CoFreeUnusedLibrariesEx
OleCreateFromFile
StgIsStorageFile
PropVariantCopy
CoWaitForMultipleHandles
GetHGlobalFromILockBytes
MkParseDisplayName
OleSetContainedObject
CoUninitialize
OleCreate
CoTaskMemAlloc
CoInitialize
CoCreateInstance
StrCmpW
StrToIntExW
StrTrimW
PathFindExtensionA
PathParseIconLocationW
PathGetCharTypeW
PathIsDirectoryW
PathIsFileSpecW
PathIsUNCServerShareW
wnsprintfW
PathFileExistsA
StrRetToBufW
SHDeleteKeyA
UrlUnescapeW
PathRemoveArgsW
PathGetArgsW
SHSetValueA
StrDupW
SHGetValueW
PathIsUNCServerW
PathQuoteSpacesW
PathAddBackslashA
PathFindExtensionW
PathRemoveExtensionW
SHRegSetPathW
SHDeleteValueW
StrStrW
SHAutoComplete
StrCmpIW
PathAppendA
PathStripPathW
wvnsprintfW
SHGetSpecialFolderPathA
SHFormatDrive
SHGetSpecialFolderLocation
ExtractIconW
SHCreateShellItem
SHSetLocalizedName
ExtractIconA
SHPathPrepareForWriteW
SHAddToRecentDocs
SHGetFolderPathAndSubDirW
ShellExecuteExA
SHGetSettings
SHGetPathFromIDListA
SHBrowseForFolderA
SHCreateDirectoryExW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ