DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8ba897c0ebcf1a32a9283e38107fa5e8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8ba897c0ebcf1a32a9283e38107fa5e8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8ba897c0ebcf1a32a9283e38107fa5e8_JaffaCakes118
Size
156KB
MD5
8ba897c0ebcf1a32a9283e38107fa5e8
SHA1
e7c003df93913ed6efab73a97b9c4ae3f7ddc029
SHA256
4d3856b061a4a19e71be4ca1b53a8f1fb8150e9671da1cebc441f8f3da03ae11
SHA512
a31ecbe41b04bd0128604f654f4f8fac7c92f0bb261e6b3b9e4219975ac978dcb1e9d153a301989266d4a1956253c6af211eccb93fcd7e4527f3ef5daf0b39f3
SSDEEP
1536:ZrCGz/3v3TgKrXh6dATV2m6LUT2jZU2Gh/tiD9zICS4AP7LQqoULapJ/nlgIPXZQ:sATgShTAPeeYNLQqoXpfHR8O
Checks for missing Authenticode signature.
resource |
---|
8ba897c0ebcf1a32a9283e38107fa5e8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DispatchMessageA
wsprintfA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
TranslateMessage
GetMessageA
ShowWindow
SetWindowPos
SystemParametersInfoA
GetClassNameA
KillTimer
SetTimer
DefWindowProcA
RegisterClassExA
CreateWindowExA
RaiseException
GetOEMCP
GetACP
ReadFile
SleepEx
GetTickCount
CloseHandle
OpenProcess
LocalFree
CreateFileA
GetModuleFileNameA
FreeLibrary
CreateRemoteThread
WriteProcessMemory
GetProcAddress
VirtualAllocEx
LoadLibraryA
GetCurrentProcessId
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetSystemDirectoryA
WriteFile
GetFileAttributesA
GetFileType
TerminateProcess
GetCurrentProcess
GetLocalTime
MultiByteToWideChar
SetEndOfFile
SetFilePointer
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetStringTypeW
TlsGetValue
SetHandleCount
GetStringTypeA
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetLastError
SetLastError
RtlUnwind
WideCharToMultiByte
HeapReAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
StrStrIA
CoInitialize
CoCreateGuid
CoCreateInstance
VariantInit
SysAllocString
GetErrorInfo
SHSetValueA
SHGetValueA
Netbios
InternetCloseHandle
InternetOpenA
InternetSetOptionA
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
UuidToStringA
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ