CleanupPluginDLL
CreatePlugin
CreatePluginEx
DllRegisterServer
DllUnregisterServer
GHasAnyPlugins
GHasPlugin
InitializePluginDLL
PluginWndProc
Static task
static1
Behavioral task
behavioral1
Sample
ec0ab0a09162bc43df32721b2536766a_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ec0ab0a09162bc43df32721b2536766a_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
ec0ab0a09162bc43df32721b2536766a_JaffaCakes118
Size
376KB
MD5
ec0ab0a09162bc43df32721b2536766a
SHA1
5df717fd81c6044fffe562c52526d3977908bd88
SHA256
5e7915d4e8efc80af02c1c7d2cdbdbf55240d9ed42c898d7f2a7860500c64a42
SHA512
8d1e90721294da6d6f693311dbcbeaa8c088be618ad460d86e402f2be5b5670996f615a3c7858c4ef5360989b44a6814b3c919338317dca25f96bfd22e914bd4
SSDEEP
6144:TWPqwrQlbeTRVXwN+1s6/e6R6BnkHPvrBCs81smqhTTnyOol:KSwkybg8y626R6BnkHP1Cs8EIl
Checks for missing Authenticode signature.
resource |
---|
ec0ab0a09162bc43df32721b2536766a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
ReadFile
WriteFile
SetFilePointer
GetFileTime
SetFileTime
GetFileAttributesA
MoveFileA
DeleteFileA
SetFileAttributesA
GetFileSize
GetLastError
CreateDirectoryA
CompareFileTime
FindClose
FindNextFileA
FindFirstFileA
SearchPathA
ResetEvent
SetEvent
CreateMutexA
ReleaseMutex
CreateEventA
DebugBreak
HeapAlloc
GetProcessHeap
FreeLibrary
HeapFree
CreateThread
OpenProcess
GetVersionExA
LocalFree
CopyFileA
WaitForMultipleObjects
GetDriveTypeA
lstrcpynA
GlobalMemoryStatus
LockResource
SizeofResource
LoadResource
FindResourceA
SetLastError
GetCurrentProcess
CallNamedPipeA
GetEnvironmentVariableA
CreateFileMappingA
DuplicateHandle
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
ResumeThread
LoadLibraryExA
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
VirtualQuery
VirtualProtect
GetSystemInfo
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
GetModuleHandleA
CreateProcessA
GetCurrentProcessId
CompareStringA
GetTickCount
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GetShortPathNameA
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalDeleteAtom
GlobalAddAtomA
WideCharToMultiByte
lstrcmpA
lstrcmpiA
lstrcatA
lstrcpyA
lstrlenA
lstrlenW
HeapReAlloc
MultiByteToWideChar
BeginPaint
GetUpdateRect
SendMessageTimeoutA
GetFocus
GetWindowRgn
GetMenuItemRect
GetMenuItemCount
GetMenu
UnionRect
UpdateWindow
InvalidateRect
SetWindowsHookExA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
GetWindowThreadProcessId
CopyRect
SetWindowLongW
IsWindowUnicode
CallWindowProcA
CallWindowProcW
EnumThreadWindows
GetMenuItemInfoA
GetMenuStringA
GetSubMenu
EqualRect
GetKeyboardType
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
DestroyMenu
AppendMenuA
ModifyMenuA
CreatePopupMenu
RemoveMenu
TrackPopupMenuEx
ReleaseCapture
GetWindowLongW
EnumPropsExA
PostThreadMessageA
GetMessageA
EndPaint
ModifyMenuW
PostMessageW
SendMessageW
GetWindowTextW
DialogBoxParamA
DialogBoxIndirectParamA
EnableWindow
CreateWindowExA
SetWindowLongA
DefWindowProcA
GetSysColor
EnumWindows
EnumChildWindows
IntersectRect
GetWindowLongA
SetWindowRgn
OffsetRect
DrawFrameControl
GetWindowDC
GetKeyState
BringWindowToTop
CallNextHookEx
ShowWindow
MoveWindow
wsprintfA
GetClientRect
GetDlgItem
GetClassNameA
GetWindow
GetParent
KillTimer
SetTimer
GetDesktopWindow
InflateRect
SetActiveWindow
SetFocus
RemovePropA
SendMessageA
SetPropA
GetActiveWindow
IsWindow
DestroyWindow
UnregisterClassA
GetClassInfoA
LoadCursorA
AppendMenuW
RegisterClassA
PostMessageA
SetRectEmpty
IsIconic
SetRect
IsRectEmpty
IsWindowVisible
PtInRect
MapWindowPoints
ChildWindowFromPointEx
GetPropA
GetWindowRect
GetSystemMetrics
GetWindowTextLengthA
GetWindowTextA
SystemParametersInfoA
GetDC
ReleaseDC
RegisterWindowMessageA
SetWindowPos
DeleteObject
OffsetWindowOrgEx
SetWindowOrgEx
BitBlt
GetDeviceCaps
GetPixel
SetPixel
CreateRoundRectRgn
CombineRgn
CreateRectRgn
SetBkColor
ExtTextOutA
CreateRectRgnIndirect
EqualRgn
ExcludeClipRect
CreateFontIndirectA
SetMapMode
SelectObject
GetTextExtentPoint32A
RegSetValueExA
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegFlushKey
RegCreateKeyExA
RegDeleteValueA
CloseServiceHandle
QueryServiceStatus
OpenServiceA
OpenSCManagerA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteExA
ShellExecuteA
SHGetSpecialFolderLocation
OleInitialize
StringFromGUID2
CoGetClassObject
OleUninitialize
CoCreateInstance
VariantChangeType
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantClear
VariantCopy
LoadRegTypeLi
VariantInit
SysFreeString
SysAllocString
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
DispGetIDsOfNames
DispInvoke
RegisterTypeLi
LoadTypeLi
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
CleanupPluginDLL
CreatePlugin
CreatePluginEx
DllRegisterServer
DllUnregisterServer
GHasAnyPlugins
GHasPlugin
InitializePluginDLL
PluginWndProc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ