DllRegisterServer
DllUnregisterServer
NSModule
Static task
static1
Behavioral task
behavioral1
Sample
dfcd03b8545a6e1f1fd85b675a83e476_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfcd03b8545a6e1f1fd85b675a83e476_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dfcd03b8545a6e1f1fd85b675a83e476_JaffaCakes118
Size
140KB
MD5
dfcd03b8545a6e1f1fd85b675a83e476
SHA1
529c5aba5ab5dd55d5c7ab6a284950f1bb6f5460
SHA256
38fbf7c3266030bf5aa7e6da8450cea78919c67206a5f413547ffabef71c5939
SHA512
5a5a65964106e85572576e79bef866d3ed4c3e9c6cd7c849d5c9110f66627ca85a4d55434a5e6e5709bcec1c4ce0669455478cdb4c6120601f2b37936b678d3b
SSDEEP
1536:eVP+GjG46N6Wcp90i3bKx2L80H7aw1GKONzghRkxYU3LKxZKwZeizAtP:o+JQr7KC77F4z53YZPeizAtP
Checks for missing Authenticode signature.
resource |
---|
dfcd03b8545a6e1f1fd85b675a83e476_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
lstrcmpW
lstrcmpA
InterlockedExchangeAdd
MapViewOfFile
GetLastError
CreateFileMappingW
lstrcatW
lstrcpyW
lstrcmpiW
GetProcAddress
LoadLibraryW
GetModuleFileNameW
MultiByteToWideChar
OpenMutexW
CloseHandle
FindClose
FindNextFileW
SetFileTime
SetEndOfFile
WriteFile
SetFilePointer
ReadFile
GetFileSize
GetFileTime
CreateFileW
GetFileAttributesW
FindFirstFileW
lstrlenA
GlobalUnlock
lstrcpynA
GlobalLock
lstrcpyA
CreateMutexW
CreateDirectoryW
GetSystemDirectoryW
GetVersionExW
GetCurrentProcessId
LocalAlloc
FreeLibrary
InterlockedExchange
LoadLibraryA
RaiseException
CreateFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
FindResourceExW
FindResourceW
LoadResource
LockResource
GetModuleHandleW
SizeofResource
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
Sleep
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
SetStdHandle
VirtualAlloc
GetStringTypeA
GetStringTypeW
SetTimer
GetKeyboardLayout
OpenClipboard
CloseClipboard
KillTimer
wsprintfA
GetTopWindow
wsprintfW
GetParent
GetWindow
GetClassNameW
UnregisterClassA
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
SHGetSpecialFolderPathW
DllRegisterServer
DllUnregisterServer
NSModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ