DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b08c8af9c5aeb24db970418808bb6e23_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b08c8af9c5aeb24db970418808bb6e23_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b08c8af9c5aeb24db970418808bb6e23_JaffaCakes118
Size
2.0MB
MD5
b08c8af9c5aeb24db970418808bb6e23
SHA1
63fd148dc922295e739acfc6938c7d9475c06c9e
SHA256
fbc51b86052cdc2c7de4f2427ffd581320056d670cae9409d5b8a89f7db3eaa5
SHA512
5279217935a4d68d8a606f631bc8853cd4fac47ba22b6b8ee5baf1027bcd37293bbe35645031b108efbe55f70b3ed10df759485af75c2d69cbda07436a36a0be
SSDEEP
49152:7QnhJc3x1BzTA7l0sc/ssr2eKl/2qt4ZBDaugs+jm:Unhy3x1Bz7/muqt4XWuji
Checks for missing Authenticode signature.
resource |
---|
b08c8af9c5aeb24db970418808bb6e23_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileType
GetStringTypeW
WinExec
OpenFileMappingA
GetVolumePathNamesForVolumeNameW
GetUserDefaultLangID
GetCommandLineW
FindActCtxSectionStringW
GetFullPathNameW
GetCommProperties
IsValidLocale
GetBinaryTypeA
DeleteTimerQueue
RtlUnwind
CreateTimerQueueTimer
GetProcAddress
SetEnvironmentVariableW
GetModuleHandleW
LoadLibraryA
GetProcessAffinityMask
CoImpersonateClient
CoRegisterMessageFilter
CoSwitchCallContext
GetComboBoxInfo
TrackPopupMenu
SendMessageA
SetWindowPlacement
CloseWindowStation
UnhookWindowsHookEx
GetGUIThreadInfo
GetKeyNameTextW
EnumDisplaySettingsW
ShowCaret
SysFreeString
PathRemoveExtensionW
ReadEventLogA
DuplicateTokenEx
RegCreateKeyA
SHGetSettings
SHOpenFolderAndSelectItems
SHCreateDirectoryExW
DragQueryFileA
GetCharacterPlacementA
GetOutlineTextMetricsA
Arc
SwapBuffers
GetTextFaceW
CopyMetaFileA
ExtTextOutA
ExtFloodFill
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ