DeinitServerExtension
GetExtensionName
InitServerExtension
_ReflectiveLoader@0
Static task
static1
Behavioral task
behavioral1
Sample
ea9db8a57b3862fcd03e8c4d0c294f40_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea9db8a57b3862fcd03e8c4d0c294f40_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ea9db8a57b3862fcd03e8c4d0c294f40_JaffaCakes118
Size
128KB
MD5
ea9db8a57b3862fcd03e8c4d0c294f40
SHA1
487219f56c36bd51bf2d7e53a20705dd4734f8f0
SHA256
d80615761242d04da17026346eb5496541e93b0e4b0fff208fcc8d3fe972fea8
SHA512
3b09491f73569c0e63f3c61013ef268e3e65c6d9c92f184669c13b06777471cb609846ca4b704a142af791d99a9d390e23ddaf18fe84d1e98046d1f0f8d85df1
SSDEEP
1536:EM8MJqGJY5FH+Jsu0spROieWaWQfEHzN5PGRJNSc+B0FsWjcdWUxm/iDh:EM8MJqGJYrfExeWaWy0NWuBXWCm/i1
Checks for missing Authenticode signature.
resource |
---|
ea9db8a57b3862fcd03e8c4d0c294f40_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDisposeImage
GdipSaveImageToStream
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromGdiDib
htonl
SetLastError
CloseHandle
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
Sleep
FreeLibrary
InterlockedDecrement
LocalAlloc
FormatMessageA
GetStringTypeW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
OutputDebugStringW
LoadLibraryExW
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetDateFormatA
GetTimeFormatA
FileTimeToSystemTime
GetFileAttributesA
ExitThread
SetUnhandledExceptionFilter
ExitProcess
GetModuleHandleA
lstrlenA
lstrcmpA
GetSystemTime
WaitForMultipleObjects
GetLastError
LoadLibraryA
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStartupInfoW
DeleteCriticalSection
GetFileType
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsProcessorFeaturePresent
lstrlenW
IsDebuggerPresent
LocalFree
GetProcAddress
LCMapStringW
HeapSize
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
InitializeCriticalSectionAndSpinCount
VirtualQuery
RaiseException
LoadLibraryExA
CreateThread
TerminateThread
ResumeThread
SetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexA
CreateEventA
MultiByteToWideChar
WideCharToMultiByte
SystemTimeToFileTime
HeapFree
HeapReAlloc
HeapAlloc
RtlUnwind
GetCommandLineA
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
DefWindowProcA
TranslateMessage
DispatchMessageA
PeekMessageA
SendMessageA
UnregisterClassA
RegisterClassExA
FindWindowW
SetWindowLongA
GetWindowLongA
ChangeClipboardChain
SetClipboardViewer
DestroyWindow
CreateWindowExA
CryptReleaseContext
CryptDeriveKey
CryptDestroyKey
CryptGetHashParam
CryptEncrypt
CryptCreateHash
CryptHashData
CryptDestroyHash
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
CryptAcquireContextA
CoUninitialize
CreateStreamOnHGlobal
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoInitialize
VariantChangeType
VariantCopy
VariantClear
VariantInit
SafeArrayGetVartype
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetDim
SysFreeString
SysAllocString
ord9
JetMove
JetTerm
JetBeginSession
JetEndSession
JetOpenTable
JetInit
JetCreateInstance
JetSetSystemParameter
JetAttachDatabase
JetDetachDatabase
JetGetTableColumnInfo
JetOpenDatabase
JetCloseDatabase
JetRetrieveColumn
DeinitServerExtension
GetExtensionName
InitServerExtension
_ReflectiveLoader@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ