DllAction
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bfeefaaba685239234110f27a0e9817e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bfeefaaba685239234110f27a0e9817e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bfeefaaba685239234110f27a0e9817e_JaffaCakes118
Size
381KB
MD5
bfeefaaba685239234110f27a0e9817e
SHA1
28adca1c5d12caa80bd027acb9151cd62bb34ce0
SHA256
ae149f4f945af0de550c3b013da95c9a6d6975d2719e7c679d765c57dfe118d3
SHA512
ef8762e3915e42b523f4281d06208cb647a4f8ca3dcabdb68bfacf7d92c5911fda2db5a8d1e92b3a2f826c189d3f047adbc4b51b8a42ab54c2d0e21667d9b563
SSDEEP
6144:xjwmXNaTeBQWM1jYdN++sQYgsvWCs9SoHGU2ZE41snGGxXhYMSYwzHY:xjwmXNaTeqWM9YD++sQYgsez9RHGU2Zs
Checks for missing Authenticode signature.
resource |
---|
bfeefaaba685239234110f27a0e9817e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHGetValueW
SHDeleteValueW
getaddrinfo
TlsAlloc
FlushFileBuffers
CreateFileA
GetProcAddress
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitThread
GetSystemTime
CreateEventW
CloseHandle
lstrcmpiA
LoadLibraryW
FreeLibrary
VirtualQuery
VirtualProtect
VirtualAlloc
InterlockedCompareExchange
GetCurrentThreadId
ResumeThread
FlushInstructionCache
GetCurrentProcess
GetThreadContext
SetThreadContext
GetLastError
SuspendThread
GetCurrentThread
SetLastError
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapFree
GetModuleHandleW
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
HeapAlloc
GetModuleHandleA
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
OffsetRect
InflateRect
ClientToScreen
PeekMessageW
DispatchMessageW
TranslateMessage
SetWindowTextW
SetActiveWindow
IntersectRect
VariantCopy
SysAllocString
VariantChangeType
VariantClear
VarCmp
VariantInit
SysFreeString
SysStringLen
DllAction
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ