DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
cf583dbfb67f804195752b811d996b1b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf583dbfb67f804195752b811d996b1b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cf583dbfb67f804195752b811d996b1b_JaffaCakes118
Size
152KB
MD5
cf583dbfb67f804195752b811d996b1b
SHA1
b704eab8017beabe98072eea634da188403151f2
SHA256
1cf5bc41b568630a8136b54f21bd797337290c8ae472835174384d30d44cba51
SHA512
aa040a625a7bc8494567d120fa4fff6a9b4d1adaa4b48fe7602d398971cf9e43de52e06419cf7ed93696973b80588f18cdae3e490cc35a79b2164a6198edf92a
SSDEEP
1536:rXQqYfb5JZJuD8oz461pkw8WiWTJelssz02v0g9WSICS4ANHohGkLakdFKAR+2:rAh5fJuD8UBGDDWxnHohGHkdcAR+
Checks for missing Authenticode signature.
resource |
---|
cf583dbfb67f804195752b811d996b1b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
SystemParametersInfoA
TranslateMessage
GetMessageA
ShowWindow
wsprintfA
SetWindowPos
DispatchMessageA
KillTimer
SetTimer
DefWindowProcA
RegisterClassExA
CreateWindowExA
IsBadCodePtr
IsBadReadPtr
MoveFileExA
CloseHandle
WaitForSingleObject
CreateProcessA
GetProcAddress
LoadLibraryA
DeleteFileA
GetSystemDirectoryA
GetLocalTime
SleepEx
GetTickCount
OpenProcess
GetModuleFileNameA
CreateFileA
GetCurrentProcessId
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
FreeLibrary
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleHandleA
ReadFile
SetEndOfFile
SetFilePointer
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
LocalFree
InterlockedDecrement
InterlockedIncrement
GetLastError
GetFileType
HeapAlloc
HeapFree
HeapReAlloc
WideCharToMultiByte
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
EnterCriticalSection
LeaveCriticalSection
WriteFile
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetFileAttributesA
LCMapStringW
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
StrStrIA
CoInitialize
CoCreateGuid
CoCreateInstance
VariantInit
SysAllocString
GetErrorInfo
Netbios
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
InternetCloseHandle
InternetOpenA
InternetSetOptionA
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
UuidToStringA
SHSetValueA
SHGetValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ