DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a68a0067fe18782cb8ae6736ca77903d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a68a0067fe18782cb8ae6736ca77903d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a68a0067fe18782cb8ae6736ca77903d_JaffaCakes118
Size
292KB
MD5
a68a0067fe18782cb8ae6736ca77903d
SHA1
507ad2b95c1fbcb6a2d32179aca7b4db21ce78b6
SHA256
9d359e396a5b0141164e8b759a8a0a765aba0415727ba65c838a381f0d0b1dc3
SHA512
42cef1265130b8500bf4f3cac776132f66cfb3faba4344adae3f1a99db5dc9d024486179b3a9461b35485bd37529e90b1ad334a6e1ee3712dc1027f4024bc0c6
SSDEEP
6144:bNHwL1kP6eQLLgJWLjYt1lYAkn9uzvgw3lt89RJ:bNHFCeQLLgxt1lYFuz4w33w
Checks for missing Authenticode signature.
resource |
---|
a68a0067fe18782cb8ae6736ca77903d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindResourceW
LoadLibraryExW
lstrcmpiW
LoadResource
RaiseException
LeaveCriticalSection
EnterCriticalSection
SizeofResource
MultiByteToWideChar
FreeLibrary
GetLastError
lstrlenW
GetModuleFileNameW
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
FlushFileBuffers
CreateFileA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetCurrentProcessId
CloseHandle
SetEvent
OpenEventA
OutputDebugStringA
OutputDebugStringW
lstrlenA
WaitForSingleObject
GetCurrentThreadId
VirtualAlloc
UnmapViewOfFile
GetSystemInfo
MapViewOfFile
CreateFileMappingA
GetCurrentThread
GetVersion
OpenFileMappingA
GetModuleFileNameA
RtlUnwind
HeapValidate
IsBadReadPtr
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
FatalAppExitA
DebugBreak
WideCharToMultiByte
IsDebuggerPresent
GetProcAddress
LoadLibraryA
GetStdHandle
WriteFile
WriteConsoleW
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
ExitProcess
LoadLibraryW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
GetOEMCP
GetCPInfo
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
VirtualQuery
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CharNextW
UnregisterClassW
MsgWaitForMultipleObjects
PeekMessageA
IsWindowUnicode
DispatchMessageA
DispatchMessageW
TranslateMessage
GetMessageA
GetMessageW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
SetThreadToken
RevertToSelf
OpenThreadToken
RegQueryInfoKeyW
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CoReleaseMarshalData
CoMarshalInterface
CreateStreamOnHGlobal
CoUnmarshalInterface
CoRevokeClassObject
CoRegisterClassObject
UnRegisterTypeLi
SysAllocString
RegisterTypeLi
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysFreeString
VarUI4FromStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ