DllCanUnloadNow
DllGetClassObject
IAlloc
Static task
static1
Behavioral task
behavioral1
Sample
da8e48e75cfd4a86b8e1741bd5f0ced9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da8e48e75cfd4a86b8e1741bd5f0ced9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
da8e48e75cfd4a86b8e1741bd5f0ced9_JaffaCakes118
Size
1.3MB
MD5
da8e48e75cfd4a86b8e1741bd5f0ced9
SHA1
14bde7eff9ec49a1abce6fadc2c64327257f8a73
SHA256
90b730b0840b98ccb02f61df482d88acd1010d189f64fbcb254719e6ec9d8f6d
SHA512
3016e3ae4dfab7482d16cf3b23205d4922be75996036fd17f40fc5d47aaf43ddbd1766710a52e9c0db950db198cf75d8957de63c3a2101dd43035d4049d28c78
SSDEEP
12288:vxwMsSpin9E7KCGuPxCsKHzxYOwB6YKs/qNxKgTWhLnUiJMy15YnmMwyZTQhECH:/s3n9EOCGrWhT7JMZdYB
Checks for missing Authenticode signature.
resource |
---|
da8e48e75cfd4a86b8e1741bd5f0ced9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileTime
GetSystemDirectoryA
SetFileTime
GetLocalTime
GetTimeZoneInformation
GetComputerNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
LoadLibraryExA
SystemTimeToFileTime
GetSystemTime
SetEvent
OpenProcess
ResumeThread
FindClose
FindNextFileA
FindFirstFileA
GetLocaleInfoA
CreateEventA
DuplicateHandle
FlushFileBuffers
SetEndOfFile
CreateThread
lstrcpynA
GetVersionExA
LocalFree
FormatMessageA
GetCurrentDirectoryA
VirtualQuery
DeleteFileA
GetProcessHeap
GetFullPathNameA
HeapCreate
HeapFree
HeapAlloc
VirtualProtect
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
IsBadCodePtr
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetStringTypeA
GetOEMCP
GetCPInfo
VirtualAlloc
VirtualFree
GetEnvironmentVariableA
HeapSize
HeapReAlloc
UnhandledExceptionFilter
TerminateProcess
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
TlsFree
TlsAlloc
GetCommandLineA
MoveFileA
GetSystemTimeAsFileTime
ExitThread
TlsGetValue
TlsSetValue
RaiseException
RtlUnwind
OutputDebugStringA
GetCurrentThreadId
GetACP
IsBadStringPtrA
IsBadReadPtr
IsBadWritePtr
GetFileAttributesW
GetFileSize
GetDriveTypeA
Sleep
QueryDosDeviceA
WideCharToMultiByte
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersion
DisableThreadLibraryCalls
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
GetCurrentProcess
FlushInstructionCache
SetLastError
GetCurrentProcessId
WaitForSingleObject
GetAtomNameA
ExitProcess
CreateFileMappingA
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleHandleA
GetDiskFreeSpaceA
FreeLibrary
LoadLibraryA
GetProcAddress
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameA
WriteFile
CreateFileA
ReadFile
SetFilePointer
CloseHandle
GetTickCount
GetClassNameA
DefWindowProcA
DispatchMessageA
GetWindowTextA
GetWindowLongA
EnumChildWindows
IsWindowVisible
FindWindowExA
GetParent
wsprintfA
GetWindowTextLengthA
GetWindowRect
SetFocus
RegisterWindowMessageA
DestroyWindow
UnregisterClassA
LoadIconA
RegisterClassA
CreateWindowExA
GetMessageA
KillTimer
SetTimer
IsWindow
EnumWindows
TranslateMessage
LoadCursorA
PostThreadMessageA
IsZoomed
SendMessageTimeoutA
MapVirtualKeyA
GetKeyState
GetForegroundWindow
GetFocus
GetKeyboardLayoutNameA
CallNextHookEx
UnhookWindowsHookEx
GetCursorPos
CallWindowProcA
RemovePropA
SetPropA
GetPropA
SetWindowLongA
GetWindow
IsWindowEnabled
SendMessageA
GetProcessWindowStation
OpenWindowStationA
SetProcessWindowStation
CloseWindowStation
PostMessageA
SetThreadDesktop
GetThreadDesktop
GetUserObjectInformationA
CloseDesktop
LoadStringA
wsprintfW
GetWindowThreadProcessId
GetStockObject
TranslateCharsetInfo
GetDeviceCaps
RegCloseKey
SetSecurityDescriptorDacl
RegQueryValueExA
RegOpenKeyExA
GetUserNameA
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
InitializeSecurityDescriptor
CoInitialize
CoTaskMemFree
CoCreateInstance
StringFromCLSID
CoUninitialize
CreateStreamOnHGlobal
LoadRegTypeLi
VariantClear
VariantChangeType
VariantCopy
SafeArrayUnaccessData
SysFreeString
SafeArrayGetLBound
SafeArrayAccessData
SysAllocStringLen
SafeArrayGetUBound
SysStringLen
GetErrorInfo
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
WNetGetConnectionA
DllCanUnloadNow
DllGetClassObject
IAlloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ