DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
eb0a7223fd74e47d302711f72fb9098f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
eb0a7223fd74e47d302711f72fb9098f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
eb0a7223fd74e47d302711f72fb9098f_JaffaCakes118
Size
167KB
MD5
eb0a7223fd74e47d302711f72fb9098f
SHA1
460398957b9f9a2f7faba9930b9718cb489ae885
SHA256
8af0b72b92d75b4e2a27c38a7265ec0fdb9e5aa85eed33b438ad2c40aeaf6119
SHA512
23e5b11c152e771d835b4cac247f262c5a283366977c758445ca5f3da6759718ef4bc67bb82fda9d813ec5ce2c63d8cf6e3118174f95f15ab7b05356f29f9c68
SSDEEP
3072:DYN49lpjBrOzq0cenO4s49W4YC37r2uiy2ak5QA:DKYzjOIex9dr7r2Xa5A
Checks for missing Authenticode signature.
resource |
---|
eb0a7223fd74e47d302711f72fb9098f_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UuidToStringW
RpcStringFreeW
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
StrCmpIW
StrStrIW
PathStripPathW
UrlEscapeW
SHDeleteKeyW
ExitThread
WaitForSingleObject
CreateThread
Sleep
GetModuleFileNameW
OpenMutexW
GetSystemTime
CreateEventW
OpenProcess
CreateMutexW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpW
SystemTimeToFileTime
GetLocalTime
LocalFree
LoadLibraryA
FreeLibrary
ExpandEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetTempFileNameW
GetTickCount
GetEnvironmentVariableW
LocalAlloc
LoadLibraryW
GetVolumeInformationW
GetWindowsDirectoryW
GetSystemInfo
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
GetProcAddress
CreateProcessW
CloseHandle
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
VirtualQuery
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapSize
GetModuleHandleA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
RealGetWindowClassW
CallWindowProcW
SetWindowLongW
SetPropW
GetWindowThreadProcessId
EnumChildWindows
PostMessageW
SendMessageW
GetWindowTextW
RemovePropW
SetWindowTextW
OffsetRect
IntersectRect
SetActiveWindow
ClientToScreen
PeekMessageW
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageW
GetClassNameW
GetPropW
InflateRect
CryptGetHashParam
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityInfo
CryptGenRandom
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext
RegQueryValueExW
RegCreateKeyW
RegCreateKeyExW
RegSetValueW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
CoInitializeEx
CoCreateInstance
CoTaskMemFree
CoUninitialize
VariantCopy
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ