DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a97b64d39ea145ae9a60fd507dbf3759_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a97b64d39ea145ae9a60fd507dbf3759_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a97b64d39ea145ae9a60fd507dbf3759_JaffaCakes118
Size
224KB
MD5
a97b64d39ea145ae9a60fd507dbf3759
SHA1
4735818ccf814e84aa1e6efa6385b99a1d96f33b
SHA256
11f04852d56e3f87bceecce12b6187b4efbfdb7d6af2cffe9d1e5ad507a233d8
SHA512
ff338f4935943e0c13dc553131a49ec6e830bec4cb7eadb66b76531b14526e521d094e199f383b41586a6cfb38e9e9051633c1f97c1cc1d5dab0f93243bc651a
SSDEEP
3072:AekZLbvkpJ7u2E6vFiKgVJ6aDuD9cHJ0O6WJtSk92MahdccFDCCK:8LbvkZE6vFinvSD9WdbY3FhddxK
Checks for missing Authenticode signature.
resource |
---|
a97b64d39ea145ae9a60fd507dbf3759_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
MultiByteToWideChar
GetModuleFileNameA
GetLastError
WideCharToMultiByte
lstrlenW
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetModuleHandleA
lstrcatA
lstrcmpiW
ExitProcess
lstrcatW
lstrcpyW
GetVolumeInformationA
CreateProcessA
CloseHandle
TerminateThread
WaitForSingleObject
CreateThread
SetFileTime
WriteFile
GetFileTime
CreateFileA
FlushFileBuffers
LeaveCriticalSection
VirtualQuery
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
SetFilePointer
GetStringTypeW
GetStringTypeA
DeleteCriticalSection
InitializeCriticalSection
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
InterlockedExchange
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenA
lstrcpyA
GetCPInfo
GetOEMCP
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
SetLastError
TlsFree
SetStdHandle
DisableThreadLibraryCalls
RtlUnwind
HeapFree
RaiseException
HeapReAlloc
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
TlsSetValue
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
HeapSize
LoadStringA
SetTimer
CharNextA
EnumWindows
wsprintfA
GetKeyboardLayout
KillTimer
GetMenu
wsprintfW
IsWindowVisible
CreateDialogParamA
GetDoubleClickTime
RegCreateKeyA
RegOpenKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExA
RegEnumKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegSetValueExA
SHGetSpecialFolderPathA
ShellExecuteA
CoTaskMemRealloc
StringFromCLSID
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
SysFreeString
DispCallFunc
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysStringLen
LoadRegTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
RegisterTypeLi
VariantInit
VarUI4FromStr
VariantClear
PathFindExtensionA
InitCommonControlsEx
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ