DllCanUnloadNow
DllGetClassObject
DllMainP
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
afa2f8b6afc7e9a992d60622fdbc1e3a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
afa2f8b6afc7e9a992d60622fdbc1e3a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
afa2f8b6afc7e9a992d60622fdbc1e3a_JaffaCakes118
Size
387KB
MD5
afa2f8b6afc7e9a992d60622fdbc1e3a
SHA1
7b4173c39190c95faf9f3c6c6fd8ca187cf5e38c
SHA256
24024b04c9238b3207cbb4ef97461ab81ddcad97479171a4de38a0fd961cb9f8
SHA512
f99245fa1c023ff06337abee5d36fffd6b3ce6cba03355329faca63763724ae29c0feaf345614556e6c5ad62b85a7d43d9b3642d6bf650e8498debe9ec1d4d44
SSDEEP
12288:0g2Rb+n5oiHBn1EgA4U3RClnViO4sQ+n:Zn5oihn1FA4U3RYVJ4sQ
Checks for missing Authenticode signature.
resource |
---|
afa2f8b6afc7e9a992d60622fdbc1e3a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA
ExitThread
GetSystemTime
CreateEventW
CloseHandle
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
FlushFileBuffers
CreateFileA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetWindowTextW
SetWindowLongW
GetWindowThreadProcessId
SetActiveWindow
PostMessageW
SendMessageW
GetPropW
RemovePropW
OffsetRect
IntersectRect
InflateRect
ClientToScreen
SetWindowTextW
PeekMessageW
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageW
CallWindowProcW
VariantCopy
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllMainP
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ