DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a0d471f22b7da4377e420f4e8cdfc800_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0d471f22b7da4377e420f4e8cdfc800_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a0d471f22b7da4377e420f4e8cdfc800_JaffaCakes118
Size
347KB
MD5
a0d471f22b7da4377e420f4e8cdfc800
SHA1
64162ff2a0b75c9f2c048a3dbdfadd3ca4d79163
SHA256
552acdc7430283d2be2fdc1ef5e686a7c77a3eb20af11b3e987aced273ebd64d
SHA512
239f6702c26917811d98b3583a8e5f50e3dd512d1e288bbf61ad0188789f056f5a3174f49e77fff5961b2f89e6953c63de7c96c1974ad12bf7eb078ec7483b3a
SSDEEP
6144:QlKtrI39d389vcAXxJI67k/11wTZtBYn9flwx1ahkk0EBuImZC4bZ:QlKtrItF89RBJX7k/ATPU9Ox1ahkkHjM
Checks for missing Authenticode signature.
resource |
---|
a0d471f22b7da4377e420f4e8cdfc800_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetSystemDirectoryA
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
GetVersionExA
GetCurrentProcess
WriteFile
CreateFileA
InterlockedDecrement
DebugBreak
OutputDebugStringA
GetTickCount
GlobalFree
GlobalLock
GlobalAlloc
GetLongPathNameA
GetModuleFileNameA
ReadFile
GetFileSize
FlushInstructionCache
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcpyW
LocalAlloc
InterlockedExchange
RaiseException
LoadLibraryA
LocalFree
lstrcatA
GetCurrentThreadId
SetEnvironmentVariableA
GetLocaleInfoW
SetEndOfFile
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetModuleHandleA
SetUnhandledExceptionFilter
SetFilePointer
GetStartupInfoA
GetFileType
GetStdHandle
HeapSize
CompareStringW
CompareStringA
GetCPInfo
LCMapStringW
LCMapStringA
HeapReAlloc
HeapAlloc
ExitProcess
GetVersion
GetCommandLineA
HeapFree
GetLastError
GetProcAddress
FreeLibrary
TerminateProcess
InterlockedIncrement
CloseHandle
Sleep
GetComputerNameA
TlsSetValue
GetWindowsDirectoryA
RtlUnwind
TlsFree
SetHandleCount
GetOEMCP
GetACP
TlsGetValue
SetLastError
TlsAlloc
GetClientRect
FindWindowA
PtInRect
GetCursorPos
SetRect
ScreenToClient
CharLowerA
wsprintfA
CharNextA
wvsprintfA
LoadStringA
PostMessageA
MessageBoxA
CallWindowProcA
GetWindowLongA
DestroyWindow
DefWindowProcA
CreateWindowExA
SetWindowLongA
GetDesktopWindow
GetParent
SetWindowPos
KillTimer
SetTimer
ShowWindow
GetWindowRect
IsWindow
CoCreateFreeThreadedMarshaler
CreateStreamOnHGlobal
CoGetMalloc
StringFromIID
SysStringLen
LoadRegTypeLi
DispCallFunc
VariantChangeType
SysAllocString
SysStringByteLen
VariantInit
VariantClear
SysFreeString
SysAllocStringByteLen
ord22
ord18
ord15
ord16
ord21
ord23
ord43
ord44
ord46
ord48
ord32
ord30
ord47
ord31
ord10
ord11
ord39
ord58
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ