DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ba7803a1abe4495e4132d9de92728238_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba7803a1abe4495e4132d9de92728238_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ba7803a1abe4495e4132d9de92728238_JaffaCakes118
Size
2.4MB
MD5
ba7803a1abe4495e4132d9de92728238
SHA1
63b8c6e6a543ddd085b47572806fec6e36d5bd00
SHA256
7b7bac33712b49256d91fe5a9a98e9bbeadf69eee0eb358106b331572f6e7c94
SHA512
833f37ab53b6176af41578619ddeef03272ebe1f19152b64e8ea7d05bae49cb985ab943a6728ab63c3617f6d5adcf645c1e7b135fecb25ef4e189c62d2cddfbd
SSDEEP
49152:JcUqxoqAEgCgGhv8XetOEthO3F2V4/xtf92RuJ0LXbR0EVF0YYm:JZqJ6GVxr+2V4/rfgMJ0LVnr0YYm
Checks for missing Authenticode signature.
resource |
---|
ba7803a1abe4495e4132d9de92728238_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnumResourceNamesA
VirtualQueryEx
GetSystemPowerStatus
CreateMailslotW
OpenFile
SetCommMask
RemoveDirectoryW
CreateActCtxW
CreateProcessA
GetDiskFreeSpaceExW
AddRefActCtx
GetTimeZoneInformation
PurgeComm
ConvertDefaultLocale
SwitchToThread
TerminateThread
DuplicateHandle
CreateTimerQueueTimer
SetLastError
CreateMutexW
GetThreadLocale
GetCurrentThreadId
WaitNamedPipeA
GetTempFileNameW
GetCommModemStatus
CallNamedPipeA
GetLocaleInfoW
GetSystemDefaultLangID
CopyFileW
FatalAppExitA
LoadLibraryA
FindNextFileW
GetModuleHandleExW
OpenJobObjectW
GetFileAttributesA
GetProcAddress
GetSystemTimeAdjustment
CoCreateInstanceEx
CoGetInterfaceAndReleaseStream
PropVariantCopy
OleQueryCreateFromData
CoDisableCallCancellation
CoTaskMemAlloc
OleDraw
GetDesktopWindow
GetGUIThreadInfo
GetQueueStatus
SetWindowWord
GetLastActivePopup
GetProcessDefaultLayout
EqualRect
DispatchMessageA
TrackMouseEvent
DrawEdge
CreateDialogParamW
RemoveMenu
GetDlgItem
LoadIconA
AdjustWindowRectEx
DrawTextExA
InsertMenuA
ChildWindowFromPointEx
GetClassInfoExW
CallMsgFilterW
FillRect
GetClassInfoW
SetWindowTextW
SetCaretPos
LoadAcceleratorsA
SysAllocStringLen
SHRegGetBoolUSValueW
PathRemoveExtensionW
wvnsprintfW
StrFormatByteSizeW
SHAutoComplete
StrCatBuffW
StrCpyW
PathIsRootW
ElfReportEventW
SetTokenInformation
RegDeleteValueA
SaferGetLevelInformation
CreateProcessAsUserW
MakeAbsoluteSD
CreateServiceW
RegQueryValueA
ImpersonateAnonymousToken
SHGetPathFromIDListA
SHAddToRecentDocs
CommandLineToArgvW
SHFileOperationA
GetGraphicsMode
GetEnhMetaFileBits
GetTextMetricsA
GetObjectA
AbortDoc
StrokePath
GetTextCharacterExtra
SetBkMode
CreateCompatibleDC
GetTextExtentPointA
SetAbortProc
CloseFigure
WidenPath
SetPolyFillMode
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.