ConfigureCall
CopyStrmPrmToRawObj
CreateFolder
EnumCustomFunctionSettingNext
EnumTvValueRelease
EventSynchronize
FlashImageItemProperty
Free
GetImageFormatAttribute
GetMaximumZoomPos
InitEx
MutexOperation
WGLGetDevice
WriteDevParamToRawEx
Static task
static1
Behavioral task
behavioral1
Sample
ac55c5db2dee9c381269078ef886b3e1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac55c5db2dee9c381269078ef886b3e1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ac55c5db2dee9c381269078ef886b3e1_JaffaCakes118
Size
309KB
MD5
ac55c5db2dee9c381269078ef886b3e1
SHA1
135a645eab97ffaeae84bb5f61ea1cbbe38000f4
SHA256
01933b7f1a842335f6f533f431eee7f222f2a184a21b0146543ba9789f70d039
SHA512
32e47ee2079b0d6ea9aa1759e52d7743a910ff2b80a075883da7edfab082e4eda24ac754f08417c5137b18f397b570d77ef028259703b8ce2654e112fbf1a727
SSDEEP
6144:5tlEVu0892Z4X/jmMnAIFZddt5PDygtVVm7hf+EUL8XpVOLF1kWFK2z3d1TrKfN3:/lLz2Z+AKd9Wgt9LjtFK2zvE3
Checks for missing Authenticode signature.
resource |
---|
ac55c5db2dee9c381269078ef886b3e1_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FlushFileBuffers
FormatMessageA
FormatMessageW
GetACP
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeThread
GetFileSize
GetLastError
GetLocalTime
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GlobalAlloc
GlobalFree
HeapAlloc
HeapCreate
HeapDestroy
DisableThreadLibraryCalls
HeapLock
HeapReAlloc
HeapUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalReAlloc
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteFile
DeleteTimerQueueTimer
DeleteCriticalSection
DebugBreak
HeapFree
CloseHandle
CoInitializeEx
CoTaskMemFree
CLSIDFromString
DeregisterEventSource
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
VarBstrFromCy
VariantInit
VarUI2FromUI4
VarI4FromI1
SysAllocString
VarCyFromI2
ConfigureCall
CopyStrmPrmToRawObj
CreateFolder
EnumCustomFunctionSettingNext
EnumTvValueRelease
EventSynchronize
FlashImageItemProperty
Free
GetImageFormatAttribute
GetMaximumZoomPos
InitEx
MutexOperation
WGLGetDevice
WriteDevParamToRawEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ