AlphaBlend
ClearRSInfo
ClearRSInfo2
DllInitialize
GradientFill
PutRSInfo
PutRSInfo2
TransparentBlt
vSetDdrawflag
Static task
static1
Behavioral task
behavioral1
Sample
8e0c16e28d4e6ed1a048afd7f1aab41a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8e0c16e28d4e6ed1a048afd7f1aab41a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8e0c16e28d4e6ed1a048afd7f1aab41a_JaffaCakes118
Size
32KB
MD5
8e0c16e28d4e6ed1a048afd7f1aab41a
SHA1
8f92c0ac4208a5a52ae484f80912410caffd2453
SHA256
66bd0664f484189c9c14edb3ebd01a70143d8466cba5769b6a36ce7bf10af78f
SHA512
e2785c0e02692f55267d8bab1696f4d985b39420562f6536c9b70b9d7d687fd6fc2209af58a215b395ee0c8d9793fc3107329b8821bd17a8657c4963ba1dfb2e
SSDEEP
384:NQhLkJWNtzDk7cx16e2H1RsmZsV6JoW5ikkeM37X/BOKcm9mKPAAjhD6K:SRkJWNZDGHsTfj/Bncm9mKPxjZ6
Checks for missing Authenticode signature.
resource |
---|
8e0c16e28d4e6ed1a048afd7f1aab41a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord941
ord4129
ord858
ord6385
ord537
ord803
ord543
ord3584
ord540
ord800
ord2818
ord2614
ord860
ord354
ord5186
ord825
ord3318
ord5773
ord5442
ord1979
ord665
ord823
_adjust_fdiv
_initterm
_onexit
__dllonexit
_mbscmp
strncpy
strstr
wcslen
free
wcscmp
malloc
atoi
strchr
_except_handler3
_strlwr
GetSystemDirectoryA
CreateFileA
ReadFile
DeleteFileA
MultiByteToWideChar
GetModuleFileNameA
CreateThread
CloseHandle
TerminateProcess
GetCurrentProcess
WriteProcessMemory
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
VirtualFree
InitializeCriticalSection
IsBadReadPtr
WritePrivateProfileStringA
WideCharToMultiByte
GetCurrentProcessId
Sleep
GetWindowsDirectoryA
GetModuleHandleA
VirtualProtect
GetCommandLineA
lstrcmpiW
GetPrivateProfileStringA
VirtualAlloc
GetPrivateProfileIntA
IsWindowVisible
GetWindowThreadProcessId
IsWindow
EnumWindows
GetForegroundWindow
GetSystemMetrics
wsprintfA
GetDesktopWindow
ShowWindow
SetWindowPos
GetWindowDC
GetWindowRect
GetWindowTextA
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
BitBlt
GdiplusStartup
GdipGetImageEncodersSize
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipGetImageGraphicsContext
GdipScaleWorldTransform
GdipDrawImageI
GdipGetImageEncoders
GdipDeleteGraphics
GdipDisposeImage
GdipSaveImageToFile
InternetCloseHandle
InternetReadFile
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetOpenA
InternetOpenUrlA
AlphaBlend
ClearRSInfo
ClearRSInfo2
DllInitialize
GradientFill
PutRSInfo
PutRSInfo2
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ