DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
cfaedd6b444fa89a2a495f2c18c73a79_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfaedd6b444fa89a2a495f2c18c73a79_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cfaedd6b444fa89a2a495f2c18c73a79_JaffaCakes118
Size
147KB
MD5
cfaedd6b444fa89a2a495f2c18c73a79
SHA1
930b55839d7f4090f43d5c0534111f0fddc011a9
SHA256
b4bc33d071f9c4884da0f94288814a2aeb35bee99d3020d0e76b95dcc35a3d67
SHA512
bb9e56779296f2715266c453ea3bff18a95fbb79fe74cfa5b0b6f79e63c0e6a1d6afb0e463bebe57d5142908645d0dfe7af4b20a8d4da424878651d0114da69e
SSDEEP
3072:7VDZ5rmIOtalASiRDSvFaWhKhgF35jfkdxvSli:hDZZmHSdaWeS35jGvV
Checks for missing Authenticode signature.
resource |
---|
cfaedd6b444fa89a2a495f2c18c73a79_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalLock
GlobalAlloc
WaitForMultipleObjects
GetFileSize
CreateFileA
lstrlenA
GetSystemTime
InterlockedDecrement
ReadFile
GetLastError
MultiByteToWideChar
DisableThreadLibraryCalls
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GetShortPathNameA
GetModuleHandleA
InterlockedIncrement
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
WriteFile
IsBadWritePtr
VirtualAlloc
VirtualFree
GetLocaleInfoW
WaitForSingleObject
CloseHandle
CreateEventA
ResumeThread
SetEvent
DeleteFileA
GlobalHandle
GlobalUnlock
GlobalFree
WideCharToMultiByte
GetEnvironmentVariableA
SetEndOfFile
SetStdHandle
IsBadCodePtr
IsBadReadPtr
FlushFileBuffers
SetFilePointer
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
HeapCreate
GetVersionExA
UnhandledExceptionFilter
SetLastError
TlsFree
TlsAlloc
HeapSize
GetCurrentProcess
TerminateProcess
GetCPInfo
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
LocalFree
Sleep
InterlockedExchange
RtlUnwind
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
HeapFree
RaiseException
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
ExitProcess
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsWindow
CharNextA
GetForegroundWindow
SetWindowPos
SetForegroundWindow
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegEnumValueA
StringFromCLSID
CoInitialize
CoUninitialize
CoCreateInstance
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoDisconnectObject
CoTaskMemRealloc
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysStringLen
VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime
SysFreeString
InternetQueryDataAvailable
InternetReadFile
InternetGetConnectedState
HttpSendRequestA
InternetOpenA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetCrackUrlA
InternetConnectA
InternetCanonicalizeUrlA
InternetCloseHandle
UrlCanonicalizeW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ