DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a0b18204eb235ab26b8908d0f7387e07_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0b18204eb235ab26b8908d0f7387e07_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a0b18204eb235ab26b8908d0f7387e07_JaffaCakes118
Size
76KB
MD5
a0b18204eb235ab26b8908d0f7387e07
SHA1
d2065c7ea09317cd28c20b87a8cfe1e716a9dc3e
SHA256
9214b04226069d6984e878fafb18e107fa3051082b8bc92cd58328b76aecfae9
SHA512
242f02fa415c0f16c6926929e96dff68686df574d952e0a8ff958c6cc7e347e51b67e886836419e64dc9d0a7fe096e7ee7480477edd874f686ae792d82075740
SSDEEP
1536:94dNVKNP8kwsEwwv+qUfJeV3HXo3XhCB1kiFb65Rw7CDBS8:+VKNPTnrf1XhCwiFbARICD48
Checks for missing Authenticode signature.
resource |
---|
a0b18204eb235ab26b8908d0f7387e07_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileMappingA
LocalFree
InterlockedIncrement
GetTickCount
GetProcAddress
CreateThread
LoadLibraryA
CreateDirectoryA
ReleaseMutex
MoveFileA
Sleep
InterlockedExchange
GetLastError
HeapFree
OpenFileMappingA
ExitProcess
SetEnvironmentVariableW
GlobalFlags
SetStdHandle
GetDiskFreeSpaceA
HeapReAlloc
CreateEventW
ReadConsoleW
UpdateResourceA
GetProcessVersion
ReadProcessMemory
EscapeCommFunction
GetFileTime
ReadConsoleInputW
CompareFileTime
lstrcmpA
GetSystemTime
VerifyVersionInfoA
GetSystemDirectoryW
GetEnvironmentStringsW
GetLargestConsoleWindowSize
CreateFileW
SetProcessShutdownParameters
IsDBCSLeadByte
LocalAlloc
CreateMailslotW
RtlUnwind
PurgeComm
GetComputerNameExW
WriteProfileStringA
CreateIoCompletionPort
WaitNamedPipeW
HeapLock
OpenProcess
ClearCommBreak
BackupWrite
GetSystemWindowsDirectoryA
GetVersionExW
GetCommTimeouts
BeginUpdateResourceA
RegisterWaitForSingleObject
IsBadHugeReadPtr
IsValidCodePage
SetFilePointerEx
lstrcmpW
DeleteTimerQueueTimer
SetHandleInformation
GetLocaleInfoW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ