DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7895ff5043438834a5961ef2e4c6679b_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
7895ff5043438834a5961ef2e4c6679b_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
7895ff5043438834a5961ef2e4c6679b_JaffaCakes118
Size
356KB
MD5
7895ff5043438834a5961ef2e4c6679b
SHA1
d675be143571f6a87cab0f7821feeb7b18757e5e
SHA256
97bc7531bb785173bc5cd42925d8e4f1c715efd798dbf84eb8f7e45e4d6257ce
SHA512
d3bc486788301ad3a293a2986fbb88b83d6733d533a04c635067fbd5f72e71c141ed6597831094c2c7b8fde8cae6843a25106f61738c4a2238f8ab1d8a96d19a
SSDEEP
6144:g6JrBPaHyN+FhvjHsKRtVv8jqHGEPX8CcjXdMSVbg+C:g6LiHu+vjMKJY8GAkJzC
Checks for missing Authenticode signature.
resource |
---|
7895ff5043438834a5961ef2e4c6679b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
DisableThreadLibraryCalls
LocalFree
FormatMessageA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
GetProcAddress
LoadLibraryA
lstrcatA
GetEnvironmentVariableA
GetFileSize
CreateFileA
SetEndOfFile
ReadFile
SetFilePointer
WriteFile
GetShortPathNameA
GetModuleHandleA
HeapAlloc
HeapFree
GetVersionExA
WritePrivateProfileStringA
GetWindowsDirectoryA
MoveFileExA
GetVersion
GetSystemTime
CreateProcessA
Sleep
TerminateProcess
ExpandEnvironmentStringsA
CreateDirectoryA
GetTempFileNameA
GetTempPathA
GetSystemDirectoryA
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcmpA
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
DeleteFileA
GetCurrentThreadId
HeapCreate
SetEnvironmentVariableA
GetLocaleInfoW
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
IsBadWritePtr
VirtualAlloc
VirtualFree
InterlockedExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TlsGetValue
SetLastError
TlsFree
TlsAlloc
HeapSize
CompareStringW
CompareStringA
GetCPInfo
LCMapStringW
LCMapStringA
ExitProcess
GetCommandLineA
GetLocalTime
GetTimeZoneInformation
WideCharToMultiByte
HeapReAlloc
RaiseException
ExitThread
TlsSetValue
CreateThread
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
lstrlenA
lstrcpyW
WaitForSingleObject
CloseHandle
lstrcpyA
GetModuleFileNameA
MultiByteToWideChar
lstrlenW
RtlUnwind
EnumChildWindows
EnumThreadWindows
CharNextA
GetSysColor
SetFocus
CreateWindowExA
GetWindow
GetWindowLongA
CallWindowProcA
GetDlgCtrlID
ReleaseCapture
CharLowerA
InvalidateRect
InvalidateRgn
GetFocus
ReleaseDC
GetDC
EndPaint
FillRect
BeginPaint
SetWindowPos
RedrawWindow
GetClassNameA
DefWindowProcA
GetClientRect
ShowWindow
DestroyWindow
IsWindow
RegisterClassExA
wsprintfA
LoadCursorA
GetClassInfoExA
SetWindowLongA
IsWindowVisible
GetWindowInfo
CharUpperA
LoadStringA
GetParent
PeekMessageA
TranslateMessage
DispatchMessageA
GetSystemMetrics
GetDlgItem
SendMessageA
IsChild
GetDesktopWindow
CreateAcceleratorTableA
SetCapture
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RegisterWindowMessageA
CreateCompatibleBitmap
GetDeviceCaps
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
DeleteObject
CreateSolidBrush
GetObjectA
GetStockObject
RegSetValueExA
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
CLSIDFromString
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
OleLockRunning
CLSIDFromProgID
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemRealloc
OleInitialize
OleUninitialize
CoCreateGuid
SafeArrayCreateVector
VariantChangeType
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantCopy
RegisterTypeLi
SysFreeString
SysAllocStringLen
SysStringLen
VariantClear
SysAllocString
LoadRegTypeLi
OleCreateFontIndirect
VarUI4FromStr
LoadTypeLi
URLDownloadToCacheFileA
timeGetTime
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
WSACleanup
gethostbyname
ntohs
getservbyname
WSAStartup
gethostname
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ