DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8ce869925daa76d0c7dc1fbc3e8ad579_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ce869925daa76d0c7dc1fbc3e8ad579_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8ce869925daa76d0c7dc1fbc3e8ad579_JaffaCakes118
Size
104KB
MD5
8ce869925daa76d0c7dc1fbc3e8ad579
SHA1
71d466930af0897d12968e74e6fc46c10db8e644
SHA256
17cd3fe1f94094ba7dc84c308446854d0c92dc5f015fe26402b30ed9888eb8a2
SHA512
188e96cb506bc199ddbcd15df0746154538d3aaf9497496d471511c1519f7577248566a67d6a0667ddc7c012cc7893e1f0c74e492dab01a96d114473ccdc7b77
SSDEEP
1536:qf/DgS7h6wP4HGysVZdaUWupEnkrURacTsv+veo8a91G1HvF+RFbsc6Z:qf/DgS7s9HDUWHoieo8aXcHvsRFbsc6
Checks for missing Authenticode signature.
resource |
---|
8ce869925daa76d0c7dc1fbc3e8ad579_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReleaseMutex
InterlockedIncrement
CloseHandle
GetModuleFileNameA
MapViewOfFile
LocalFree
GetModuleHandleA
EnterCriticalSection
Sleep
InitializeCriticalSection
CreateProcessA
CreateDirectoryA
MoveFileA
DeleteFileA
CopyFileA
GetTickCount
InterlockedExchange
CreateFileMappingA
VirtualProtect
GetProcAddress
GetLastError
LoadLibraryA
CreateThread
CreateMutexA
GlobalGetAtomNameW
LocalAlloc
SetConsoleCtrlHandler
WaitNamedPipeW
GetThreadContext
LocalReAlloc
SetTimeZoneInformation
GetTempPathA
VirtualAllocEx
GetSystemWow64DirectoryW
AllocConsole
HeapUnlock
FormatMessageW
SetCurrentDirectoryA
GetSystemInfo
ReadProcessMemory
ConnectNamedPipe
PostQueuedCompletionStatus
SwitchToThread
SetEvent
FindNextVolumeMountPointW
IsValidCodePage
GetVolumeNameForVolumeMountPointW
GetVersion
SetEnvironmentVariableA
EnumResourceLanguagesA
CreateNamedPipeA
PeekConsoleInputA
FindVolumeClose
SetHandleInformation
FindResourceExA
GetTempPathW
SetHandleCount
GetFileAttributesExA
DeviceIoControl
OpenMutexW
FindFirstFileA
CreateTimerQueue
SetConsoleWindowInfo
GlobalAddAtomA
InterlockedExchangeAdd
FindClose
GetWindowsDirectoryW
FindFirstVolumeMountPointW
TerminateJobObject
FindResourceExW
GetTimeFormatW
lstrcpyW
WriteProfileStringW
EnumResourceNamesA
DeleteFileW
FindFirstFileExW
SetProcessWorkingSetSize
CreateFileW
GetModuleHandleW
AddAtomA
GetCurrentDirectoryA
SetComputerNameA
FindFirstVolumeW
ExitProcess
GetSystemDefaultUILanguage
GetVersionExW
FileTimeToLocalFileTime
IsBadWritePtr
QueryPerformanceFrequency
SearchPathW
TransactNamedPipe
RaiseException
GlobalFlags
GetDefaultCommConfigW
HeapSize
ResumeThread
lstrcpynA
GetTimeFormatA
SleepEx
FindFirstChangeNotificationW
SetConsoleScreenBufferSize
SetConsoleTextAttribute
GetTapeParameters
VirtualFree
MoveFileExW
GetFileAttributesExW
CancelWaitableTimer
GetCPInfo
WriteProcessMemory
GetStringTypeW
GetSystemTime
CreateDirectoryW
CopyFileExW
OpenFileMappingA
GetUserDefaultLCID
lstrcatW
WriteConsoleW
HeapReAlloc
GetCurrentProcess
VerLanguageNameW
GetFullPathNameW
CreateConsoleScreenBuffer
SetFilePointer
CreateMailslotW
OpenProcess
GetFileAttributesA
WaitForMultipleObjects
GetStringTypeA
GetExitCodeThread
GetSystemDirectoryW
QueueUserWorkItem
FreeLibraryAndExitThread
IsBadHugeReadPtr
SetNamedPipeHandleState
DisconnectNamedPipe
HeapValidate
GetConsoleOutputCP
OpenJobObjectW
GetFileTime
LocalSize
OpenMutexA
SetCurrentDirectoryW
OleCreateStaticFromData
CoDisableCallCancellation
GetRunningObjectTable
CoQueryProxyBlanket
CreateItemMoniker
OleDuplicateData
OleCreateLinkToFile
CoCreateGuid
CoAllowSetForegroundWindow
OleIsRunning
StgOpenStorageOnILockBytes
CreateDataCache
OleUninitialize
OleSave
StgIsStorageILockBytes
CoGetMarshalSizeMax
CoFreeUnusedLibrariesEx
OleCreateFromFile
OleRegGetUserType
StgCreateDocfile
MkParseDisplayName
OleCreateMenuDescriptor
OleCreate
CoInitialize
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
PropVariantClear
CoTaskMemFree
AssocCreate
PathGetCharTypeW
PathSkipRootW
SHSetValueW
wnsprintfW
PathRemoveArgsW
PathUnquoteSpacesW
PathUndecorateW
PathGetDriveNumberW
UrlIsW
SHRegGetUSValueW
StrCatBuffA
PathRemoveFileSpecW
StrCpyNW
StrStrW
UrlCreateFromPathW
PathRemoveBackslashW
StrToIntW
UrlCombineW
SHRegSetUSValueW
StrChrIW
PathGetArgsW
SHRegSetPathW
UrlUnescapeW
SHDeleteKeyA
SHDeleteKeyW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ