DllRegisterServer
DllUnregisterServer
NSPCleanup
NSPStartup
Register
Static task
static1
Behavioral task
behavioral1
Sample
e26468f0c3efa7e0c2cf53c17f6d5d44_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e26468f0c3efa7e0c2cf53c17f6d5d44_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e26468f0c3efa7e0c2cf53c17f6d5d44_JaffaCakes118
Size
288KB
MD5
e26468f0c3efa7e0c2cf53c17f6d5d44
SHA1
5d6de6a5d5c8fc8730dacb12f57e69ed87381a0e
SHA256
652b4450e81b545277fb1058f7e3db8e134a3a3d71dcb9a4e9bb2be9aeca35d2
SHA512
ac7bf88b411bd30e72452a5d09f81c881f16b143ab6a63bc02cab3d6c6c34d5e89c18299f282173da008134df0341e33db61d7f2ac85e088ad0c2b0d97ddd55c
SSDEEP
3072:nrOWQ2XQYborsGLyq+K7RbepMKBibvHBHOTBfRPz4WtHRgCzZJAp6kR:sCQUorzb7wmKBibvlOTBJTR7t
Checks for missing Authenticode signature.
resource |
---|
e26468f0c3efa7e0c2cf53c17f6d5d44_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSACleanup
WSACleanup
WSAStartup
WSACleanup
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapCreate
GetEnvironmentStringsW
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
InterlockedIncrement
lstrlenW
ExitProcess
GetProcAddress
GetModuleHandleW
GetCurrentProcessId
GetCurrentProcess
Sleep
CreateThread
DecodePointer
EncodePointer
GetModuleFileNameW
CloseHandle
GetLastError
InterlockedDecrement
SetLastError
WaitForSingleObject
lstrlenA
WriteFile
ReadFile
CreateMutexW
GetModuleHandleA
LoadLibraryW
VirtualAllocEx
GetCurrentThreadId
VirtualFreeEx
DuplicateHandle
VirtualAlloc
LoadLibraryA
CreateEventW
InterlockedCompareExchange
GetTickCount
FlushFileBuffers
CreateFileA
GetConsoleMode
FreeEnvironmentStringsW
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetOEMCP
IsValidCodePage
GetSystemTime
GetConsoleCP
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
SetFilePointer
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetStdHandle
GetModuleHandleA
GetModuleHandleA
DllRegisterServer
DllUnregisterServer
NSPCleanup
NSPStartup
Register
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ