DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dcda8c04329473b98209cc73960ffed9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dcda8c04329473b98209cc73960ffed9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dcda8c04329473b98209cc73960ffed9_JaffaCakes118
Size
252KB
MD5
dcda8c04329473b98209cc73960ffed9
SHA1
712745407b914283b28c35073f19ea781cb0a485
SHA256
920fe55b1b5fa44e0f5e6db85df7e1d34d9d404f640ffea25955e8ca383b804d
SHA512
f5838d42b3d0d6de425800b37a55e468abcb295e4b2676d20689a7c8f42d420146612ca8ef8a309a0402ca666321f403ce22fa5c6a58d639427e3e55acc44684
SSDEEP
6144:5B21HRfB8PBIg5Gg8Gg6hess59OJxaUi1c:2jB85BMg8GThzs59kxaUi
Checks for missing Authenticode signature.
resource |
---|
dcda8c04329473b98209cc73960ffed9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtOpenFile
NtQueryInformationFile
NtClose
RtlInitUnicodeString
VirtualFree
VirtualAlloc
GetProcessHeap
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
HeapFree
InterlockedExchange
GetVersionExA
FormatMessageW
LocalFree
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
LoadLibraryW
SetLastError
GetModuleFileNameW
OutputDebugStringA
DisableThreadLibraryCalls
LoadLibraryExW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
GetDriveTypeW
LoadLibraryA
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
DeleteObject
GetObjectW
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
DragQueryFileW
CoTaskMemFree
CoCreateInstance
StringFromGUID2
ReleaseStgMedium
CoGetObject
CoTaskMemAlloc
CoTaskMemRealloc
LoadTypeLi
VarBstrCat
SysAllocStringLen
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
SysAllocString
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ