DllAction
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b9febce1a5d874b8c4d399fcb43dd4f0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9febce1a5d874b8c4d399fcb43dd4f0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b9febce1a5d874b8c4d399fcb43dd4f0_JaffaCakes118
Size
478KB
MD5
b9febce1a5d874b8c4d399fcb43dd4f0
SHA1
ca127a8d8900707d3faa3fe7fa632ab3c1c74959
SHA256
95b42e16069f3d56fc2d280e731d1683039769f5b93c22840c9f6b8eec1a8ca3
SHA512
d644e4a664ee8f67ffa225de60761c01fa3401252fb11ddc5eb5a305cb8a1ff0aa67d00af1ab5ba895c274db68f6c81f435469131287f8841f4bc6065a65a869
SSDEEP
6144:BvL09V6xXBJdW6Djd6nrfmcIzcNAiyecsG2GeEDLCp8wHyKCT8L:NL09IBJdW6Dwjoz89ye1G2nEDLifL
Checks for missing Authenticode signature.
resource |
---|
b9febce1a5d874b8c4d399fcb43dd4f0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHDeleteValueW
SHGetValueW
CompareFileTime
WriteConsoleW
GetConsoleOutputCP
GetProcAddress
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentDirectoryW
OpenSemaphoreW
GetThreadContext
SetUnhandledExceptionFilter
ClearCommBreak
OpenProcess
OpenFileMappingW
GetNamedPipeInfo
GetFileType
GetBinaryTypeA
FindFirstFileA
CreateFileMappingW
GetLongPathNameW
GetCommConfig
TransactNamedPipe
CreateFileW
LoadLibraryExW
DosDateTimeToFileTime
GetProcessShutdownParameters
GetProcessHeap
GetDriveTypeW
GlobalMemoryStatusEx
GlobalFindAtomW
AddAtomA
BeginUpdateResourceW
GetProfileSectionW
GetCompressedFileSizeW
GetModuleHandleA
GetFileAttributesExW
GetLastError
GetPriorityClass
ReadFile
GetProcessHeaps
GlobalHandle
MoveFileA
FindNextFileW
SetFileShortNameW
HeapQueryInformation
GetPrivateProfileSectionNamesW
SetCurrentDirectoryW
OpenFile
SetCommTimeouts
GetProfileStringA
MoveFileExA
GlobalGetAtomNameW
FindFirstFileW
GetProfileIntW
GetTempFileNameA
GetLogicalDriveStringsW
SetSystemPowerState
ExitThread
EnumResourceNamesW
GetDriveTypeA
GetNamedPipeHandleStateA
GetVersion
GetEnvironmentVariableW
WriteProfileSectionA
FormatMessageW
GetThreadSelectorEntry
GetCurrentProcess
GetProcessWorkingSetSize
GetStartupInfoW
FindNextFileA
GetStdHandle
EndUpdateResourceW
GetWriteWatch
SetDefaultCommConfigW
GetFileTime
SetComputerNameW
GetFirmwareEnvironmentVariableA
BuildCommDCBA
EnumResourceLanguagesA
EnumResourceLanguagesW
GetCommandLineW
FindResourceExA
ResumeThread
IsSystemResumeAutomatic
BuildCommDCBAndTimeoutsW
WriteProcessMemory
GlobalFree
GetDefaultCommConfigA
FileTimeToLocalFileTime
CreateProcessW
GetLogicalDriveStringsA
SleepEx
GetWindowsDirectoryA
GetFullPathNameA
GetTapeParameters
CreateMailslotW
GetCurrentThread
VirtualAllocEx
GetNumaProcessorNode
CopyFileA
ClearCommError
CancelIo
GlobalAddAtomA
GetProcessAffinityMask
GetModuleFileNameW
ConnectNamedPipe
GlobalAddAtomW
GetCommTimeouts
GetSystemDirectoryW
DuplicateHandle
GlobalFix
RequestWakeupLatency
RemoveDirectoryW
FindResourceA
DeleteAtom
GetFirmwareEnvironmentVariableW
GetProcessVersion
SetStdHandle
BackupSeek
InitAtomTable
GetFileSize
HeapAlloc
SetCommState
GetFileAttributesW
GetOverlappedResult
CreateProcessA
FindResourceExW
SetFilePointerEx
MapViewOfFile
InterlockedIncrement
GetPrivateProfileIntA
MoveFileExW
lstrlenW
GetModuleFileNameA
InterlockedExchangeAdd
LocalHandle
DebugBreak
OpenEventW
GetPrivateProfileIntW
GetHandleInformation
GetDefaultCommConfigW
SetEnvironmentVariableW
CreateMailslotA
GetSystemTime
GetFileAttributesExA
FindFirstChangeNotificationA
CreateFileA
OutputDebugStringA
GetFileAttributesA
FreeResource
GetSystemTimeAsFileTime
GetAtomNameW
lstrcatW
EnumResourceTypesA
GetTempPathA
GetSystemWindowsDirectoryA
GetShortPathNameW
GlobalMemoryStatus
CreateEventW
CloseHandle
GetCommProperties
GlobalAlloc
GetSystemDirectoryA
InterlockedDecrement
SearchPathA
FormatMessageA
GetDiskFreeSpaceExA
FindAtomW
FlushFileBuffers
MoveFileW
GetCurrentProcessId
GetFileSizeEx
ProcessIdToSessionId
ContinueDebugEvent
EnumResourceNamesA
IsBadStringPtrA
DefineDosDeviceW
GetAtomNameA
GetDiskFreeSpaceExW
FindResourceW
GetExitCodeThread
GetThreadPriorityBoost
IsBadHugeWritePtr
CreateMutexW
FlushViewOfFile
ExitProcess
IsProcessorFeaturePresent
DebugActiveProcess
OpenSemaphoreA
FindCloseChangeNotification
GetComputerNameA
FindNextChangeNotification
CreateTapePartition
GlobalLock
FreeEnvironmentStringsA
WriteProfileStringA
GetNumaNodeProcessorMask
GetShortPathNameA
GetWindowsDirectoryW
GetBinaryTypeW
GetCommMask
UnlockFile
GetSystemTimeAdjustment
GetLocalTime
RemoveDirectoryA
FreeLibraryAndExitThread
MultiByteToWideChar
VirtualLock
WaitNamedPipeA
FindClose
GetTempPathW
GetThreadPriority
GetDiskFreeSpaceW
GlobalSize
GetTempFileNameW
HeapSize
SetLastError
LockFile
HeapDestroy
EndUpdateResourceA
VirtualFree
GetPrivateProfileStringW
WaitForSingleObjectEx
SetFileApisToOEM
GetProfileIntA
QueryDosDeviceA
SetThreadPriority
GetFullPathNameW
SetDefaultCommConfigA
FatalAppExitW
GetLongPathNameA
LocalFlags
VirtualAlloc
IsBadWritePtr
OpenEventA
WritePrivateProfileStructW
GlobalWire
AreFileApisANSI
LocalFree
GlobalDeleteAtom
CreateDirectoryA
CreateSemaphoreW
SetThreadAffinityMask
IsBadCodePtr
GetPrivateProfileSectionA
LoadLibraryW
DeleteFileW
LocalFileTimeToFileTime
lstrcmpiA
WriteFileGather
LoadLibraryExA
TlsAlloc
EnumResourceTypesW
GetCommandLineA
SizeofResource
GetEnvironmentStringsW
GetProcessPriorityBoost
FindAtomA
GetProcessId
GetSystemPowerStatus
OpenMutexW
SetEvent
WaitNamedPipeW
SetSystemTime
VirtualProtect
CreateDirectoryW
IsBadStringPtrW
FindFirstChangeNotificationW
GetDevicePowerState
UpdateResourceW
CancelDeviceWakeupRequest
GetProfileStringW
ExpandEnvironmentStringsW
LockFileEx
GetLogicalDrives
HeapCompact
FreeLibrary
BuildCommDCBAndTimeoutsA
SetTimeZoneInformation
VirtualQuery
QueryPerformanceCounter
GetModuleHandleW
WriteProfileSectionW
QueryDosDeviceW
GetCurrentThreadId
GetTapePosition
FlushInstructionCache
PulseEvent
CallNamedPipeA
HeapSetInformation
SetFileShortNameA
GetFileInformationByHandle
BuildCommDCBW
FatalExit
WaitCommEvent
GetThreadTimes
WaitForMultipleObjects
VerifyVersionInfoW
SetThreadContext
SystemTimeToTzSpecificLocalTime
InterlockedCompareExchange
SuspendThread
WriteConsoleA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
GetTickCount
HeapCreate
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
SetHandleCount
WriteFile
Sleep
TlsFree
TlsSetValue
TlsGetValue
HeapFree
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
RaiseException
CharUpperW
RealGetWindowClassW
GetClassNameA
OffsetRect
IntersectRect
InflateRect
ClientToScreen
GetWindowLongA
GetParent
SetWindowLongA
SetWindowTextW
CreateDialogParamA
PeekMessageW
GetWindowRect
SetActiveWindow
SetPropA
SetPropW
CharLowerW
MsgWaitForMultipleObjects
DestroyWindow
SetWindowLongW
SendMessageW
GetPropW
GetClientRect
GetDlgItem
GetWindowTextA
PostMessageW
GetWindowTextW
EnumChildWindows
RemovePropW
MoveWindow
CreateDialogParamW
GetWindowLongW
SendMessageA
RemovePropA
TranslateMessage
GetWindowThreadProcessId
BringWindowToTop
DispatchMessageW
GetPropA
RealGetWindowClassA
GetClassNameW
VariantClear
SysStringLen
SysFreeString
VariantInit
VarCmp
VariantChangeType
SysAllocString
VariantCopy
DllAction
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ