DllAction
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bef5e0c0d12734e651c9a480d1015e5c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bef5e0c0d12734e651c9a480d1015e5c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bef5e0c0d12734e651c9a480d1015e5c_JaffaCakes118
Size
498KB
MD5
bef5e0c0d12734e651c9a480d1015e5c
SHA1
1208859f37964dc8fb3c4fcbe5ec483c1eb180c9
SHA256
df5397d51be6c4055adc46e154d8675182642522d5d53ab446173f41f1dba05e
SHA512
5b6641c6f0f83c785340b71eb7743f08d3c08b083b8963e49db80c6c765fc9104cceb93bc8c91ad26c572d2eba971dccf991b873aea2a27575d52baf97bebefd
SSDEEP
12288:n5NOdInUK8TVlVBDZ4gygHnL+5aM8szCDT:5L89BZfygi5aM8szC
Checks for missing Authenticode signature.
resource |
---|
bef5e0c0d12734e651c9a480d1015e5c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHDeleteValueW
SHGetValueW
CreateFileA
GetProcAddress
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsSystemResumeAutomatic
GetSystemTime
FatalExit
InterlockedCompareExchange
GetProcessAffinityMask
VirtualFree
GlobalHandle
ClearCommError
GlobalGetAtomNameA
OpenFileMappingW
TlsSetValue
GetVersion
GetPriorityClass
lstrlenW
SetComputerNameA
InterlockedExchange
IsBadWritePtr
HeapValidate
GetCurrentProcess
CreateSemaphoreW
CreateFileMappingW
GlobalAddAtomW
GetLastError
GetSystemPowerStatus
CreateDirectoryExW
CreateMutexW
GetModuleFileNameW
OutputDebugStringW
GetProcessShutdownParameters
Beep
WriteProcessMemory
GetNamedPipeHandleStateW
GetFileAttributesW
QueryDosDeviceA
SetTimeZoneInformation
GetCurrentDirectoryW
GetCommMask
GetLongPathNameA
ExitThread
CreateMailslotA
CommConfigDialogW
GetDefaultCommConfigA
GetFirmwareEnvironmentVariableW
LocalFree
DeleteAtom
GetFirmwareEnvironmentVariableA
SetTapeParameters
GetCommandLineA
WriteProfileSectionW
WritePrivateProfileStringA
GetFileAttributesExA
GetFileType
GetCurrentThreadId
IsBadHugeWritePtr
RequestDeviceWakeup
CreateFileW
EscapeCommFunction
OpenProcess
GetDefaultCommConfigW
AreFileApisANSI
SetFileShortNameW
CreateDirectoryExA
LocalUnlock
SetDefaultCommConfigW
GetPrivateProfileSectionW
WritePrivateProfileStructW
GlobalUnfix
HeapUnlock
SetMessageWaitingIndicator
GetLogicalDriveStringsW
ProcessIdToSessionId
FindResourceW
FlushViewOfFile
SetCommState
EndUpdateResourceW
ExpandEnvironmentStringsW
GetTickCount
OpenMutexW
GetComputerNameW
GetLongPathNameW
GetTempPathA
GetTempFileNameW
WaitNamedPipeA
GetFileAttributesExW
SetFileApisToOEM
QueryPerformanceCounter
FatalAppExitW
CreateSemaphoreA
GetModuleHandleW
LoadLibraryExW
GetVolumeInformationW
GetProcessPriorityBoost
GetLocalTime
CompareFileTime
LocalSize
LoadModule
DefineDosDeviceW
CreateDirectoryW
MultiByteToWideChar
CreateProcessW
GetEnvironmentStringsW
GetFullPathNameA
FlushFileBuffers
SetFirmwareEnvironmentVariableW
GetPrivateProfileStringW
EnumResourceLanguagesW
DeleteFileA
GlobalCompact
BackupSeek
CreateEventW
AddAtomW
GetPrivateProfileSectionNamesW
CreateDirectoryA
GetStartupInfoA
BuildCommDCBW
SetThreadContext
GetCommConfig
SetThreadPriority
FindNextChangeNotification
FreeLibrary
GetCommModemStatus
RaiseException
GetStartupInfoW
EnumResourceTypesW
GetNamedPipeHandleStateA
FindAtomW
LockResource
GetSystemInfo
FindFirstChangeNotificationW
DeleteFileW
GlobalMemoryStatusEx
InterlockedIncrement
CloseHandle
FormatMessageW
GetAtomNameW
DebugBreakProcess
SetProcessAffinityMask
SetFileAttributesW
lstrcatA
WinExec
OpenEventW
DuplicateHandle
MoveFileExA
IsBadStringPtrA
FatalAppExitA
DosDateTimeToFileTime
DebugActiveProcessStop
SetupComm
ConnectNamedPipe
GetVersionExA
SetFirmwareEnvironmentVariableA
GetQueuedCompletionStatus
UpdateResourceA
SetMailslotInfo
LocalFileTimeToFileTime
FindFirstFileW
GlobalWire
GetTapeParameters
CreateEventA
EnumResourceLanguagesA
HeapDestroy
GetProfileSectionW
GetWindowsDirectoryW
SetVolumeLabelW
PurgeComm
SetEvent
FindAtomA
WritePrivateProfileSectionA
GetNumaNodeProcessorMask
CopyFileW
GetCompressedFileSizeA
WaitForMultipleObjectsEx
FreeEnvironmentStringsA
lstrcatW
LocalHandle
lstrcmpW
GetTapePosition
PulseEvent
GlobalFindAtomW
GlobalLock
GetCommandLineW
LoadLibraryExA
WriteTapemark
HeapFree
EnumResourceNamesW
FindCloseChangeNotification
lstrcpyW
UpdateResourceW
DebugSetProcessKillOnExit
CommConfigDialogA
HeapCompact
GetSystemWindowsDirectoryW
HeapSize
GetProcessHeap
GetLogicalDriveStringsA
GetMailslotInfo
FindNextFileW
GetDiskFreeSpaceW
GetTempPathW
GetShortPathNameW
GetHandleInformation
GetProfileIntW
IsBadStringPtrW
MoveFileW
GlobalReAlloc
WritePrivateProfileStringW
FileTimeToSystemTime
GlobalUnWire
HeapCreate
SetEndOfFile
ReadFileEx
WriteProfileStringA
lstrcmpA
GetProcessIoCounters
ReadProcessMemory
LocalReAlloc
GetFullPathNameW
DisconnectNamedPipe
FreeResource
GetNumaHighestNodeNumber
GlobalUnlock
GetCurrentProcessId
OpenSemaphoreW
BackupRead
FindResourceExW
GetFileInformationByHandle
BuildCommDCBAndTimeoutsW
GetVersionExW
SetCurrentDirectoryW
LoadLibraryW
GetNamedPipeInfo
DefineDosDeviceA
lstrcmpiA
lstrcmpiW
GetSystemDirectoryW
EraseTape
ContinueDebugEvent
SetThreadAffinityMask
GetLogicalDrives
GetPrivateProfileIntA
GetSystemDirectoryA
BeginUpdateResourceW
VirtualAllocEx
UnmapViewOfFile
GetStdHandle
LocalShrink
GetSystemWindowsDirectoryA
SetCommConfig
SetHandleCount
GetEnvironmentVariableA
InitAtomTable
lstrcpyA
TzSpecificLocalTimeToSystemTime
GetModuleHandleA
GetCommTimeouts
SetSystemTime
GetBinaryTypeW
GetOverlappedResult
FileTimeToLocalFileTime
GetDriveTypeW
OpenThread
SetLocalTime
EnumResourceNamesA
BuildCommDCBAndTimeoutsA
GetExitCodeProcess
FindResourceExA
EndUpdateResourceA
InterlockedDecrement
GetProfileIntA
OpenEventA
GetPrivateProfileStructW
GetNumaProcessorNode
WritePrivateProfileSectionW
GetFileTime
GetPrivateProfileStructA
GetProcessHeaps
MoveFileA
ClearCommBreak
CreateThread
CallNamedPipeW
CreateRemoteThread
GetThreadTimes
WriteFile
LocalLock
VirtualProtect
EnumResourceTypesA
FreeLibraryAndExitThread
DebugBreak
WaitForMultipleObjects
GetProcessVersion
GetWriteWatch
LocalAlloc
TlsGetValue
SetComputerNameW
GetThreadSelectorEntry
SetErrorMode
SetProcessWorkingSetSize
GetEnvironmentVariableW
CallNamedPipeA
GetSystemTimeAsFileTime
GetThreadContext
PeekNamedPipe
VerifyVersionInfoW
VirtualQuery
VirtualAlloc
ResumeThread
FlushInstructionCache
SuspendThread
GetCurrentThread
SetLastError
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
GetModuleFileNameA
ExitProcess
Sleep
HeapAlloc
TlsFree
TlsAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
SetActiveWindow
SendMessageA
OffsetRect
IntersectRect
InflateRect
ClientToScreen
SetWindowLongW
GetClientRect
SetWindowTextW
DispatchMessageW
RemovePropA
SetPropW
GetClassNameW
DestroyWindow
CharUpperW
GetWindowThreadProcessId
GetParent
SetWindowLongA
RealGetWindowClassA
PostMessageW
GetWindowLongA
SetPropA
RealGetWindowClassW
PeekMessageW
GetClassNameA
TranslateMessage
GetPropW
RemovePropW
GetDlgItem
MoveWindow
GetWindowLongW
CharLowerW
GetWindowTextW
SendMessageW
CreateDialogParamW
GetPropA
BringWindowToTop
GetWindowTextA
GetWindowRect
EnumChildWindows
CreateDialogParamA
MsgWaitForMultipleObjects
VariantInit
VariantCopy
SysAllocString
VariantChangeType
SysStringLen
SysFreeString
VarCmp
VariantClear
DllAction
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ