DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ac33ea2e2441254e0f7a6ed1c6aef75a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac33ea2e2441254e0f7a6ed1c6aef75a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ac33ea2e2441254e0f7a6ed1c6aef75a_JaffaCakes118
Size
140KB
MD5
ac33ea2e2441254e0f7a6ed1c6aef75a
SHA1
e3092988e15089c30234d75709d32ba312ae6f3e
SHA256
bf397b70c4db69798fb678ce5fac5f984ca2c63ba8b12e426ea412ce5e436642
SHA512
71e4a6427b2bd091d7966511e486620426fe336dcc958a591432f00f998ee32aa015d6c24fc06535680df6ff77c22dc9373c52a10dee7765d27257ed8c5a8369
SSDEEP
1536:GKW0C3WM6nIOt8cQETdMEIrkhxNy4opNjO5+MZTNiePb2jGl7Be8gbs7lhE:GKW0C3WM6nII8cp/hnxoC9TiSlV047r
Checks for missing Authenticode signature.
resource |
---|
ac33ea2e2441254e0f7a6ed1c6aef75a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapAlloc
RaiseException
HeapSize
HeapReAlloc
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
TerminateProcess
ExitProcess
GetCommandLineA
RtlUnwind
GetOEMCP
GetCPInfo
FlushFileBuffers
SetFilePointer
WriteFile
GetProcessVersion
LoadLibraryA
FreeLibrary
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetLastError
GetModuleHandleA
GetProcAddress
SetLastError
WritePrivateProfileStringA
GlobalFlags
GetVersion
lstrcpyA
lstrcatA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalAlloc
LocalFree
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
lstrcpyW
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
InitializeCriticalSection
DestroyMenu
GetSysColorBrush
LoadCursorA
LoadIconA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
SetWindowPos
SetWindowLongA
DefWindowProcA
GetWindowLongA
CallWindowProcA
DestroyWindow
IsWindow
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetClassNameA
GetFocus
SetFocus
GetWindow
GetClientRect
ShowWindow
CreateWindowExA
PostQuitMessage
PostMessageA
SendMessageA
SetCursor
EnableWindow
MessageBoxA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
GetMenuItemCount
wsprintfA
GetWindowTextA
SetWindowTextA
ClientToScreen
GetDlgCtrlID
GetWindowRect
PtInRect
UnregisterClassA
UnhookWindowsHookEx
LoadStringA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
GetObjectA
ExtTextOutA
TextOutA
Escape
RectVisible
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
CreateBitmap
DeleteObject
DeleteDC
PtVisible
GetDeviceCaps
RestoreDC
SaveDC
ClosePrinter
DocumentPropertiesA
OpenPrinterA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
ord17
CoInitialize
CoCreateInstance
CoUninitialize
SysFreeString
LoadRegTypeLi
SysStringLen
SysAllocString
SysAllocStringLen
ord50
ord32
ord57
ord18
ord51
ord21
ord16
ord23
ord43
ord58
ord30
ord11
ord39
ord10
ord46
ord47
ord44
ord15
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ