DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f58508584d78a22cfbb9d257db78c1ba_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f58508584d78a22cfbb9d257db78c1ba_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f58508584d78a22cfbb9d257db78c1ba_JaffaCakes118
Size
237KB
MD5
f58508584d78a22cfbb9d257db78c1ba
SHA1
4415ccbfc0f046422482cff25dc28a7f4de296c3
SHA256
ad37df11a443058f9c17c537a1f4e6a64b938bb6de08f0f45d5969115cea7164
SHA512
ac4c66dbf6d2a3c43f223a3a2704dae3ad409c389ba6ab0a178770296c3998d1fa77109af2544a1b5afe2e6f433ce142d2bf369ae629a18578c98097adebef2c
SSDEEP
3072:56EpYjAH7nwEoyfP+zSI+rbKhLaTq2XWuKJZiYNK3zUneUU:96jq7wQ+SI+r2oqVJrny
Checks for missing Authenticode signature.
resource |
---|
f58508584d78a22cfbb9d257db78c1ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
InterlockedDecrement
lstrlenW
GetShortPathNameW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
lstrlenA
SizeofResource
LoadResource
FindResourceW
InterlockedIncrement
LoadLibraryExW
lstrcmpiW
lstrcpynW
HeapDestroy
GetProcAddress
LoadLibraryW
lstrcpyW
lstrcatW
SetEnvironmentVariableA
CompareStringW
CompareStringA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GlobalFindAtomW
GlobalAddAtomW
GetTempPathW
GetTempFileNameW
GetLastError
Sleep
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
CloseHandle
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsWindow
GetClientRect
CharNextW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueW
SHLoadInProc
ShellExecuteW
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
VarUI4FromStr
SysAllocString
RegisterTypeLi
VMProtectBegin
VMProtectEnd
URLDownloadToFileW
PathRenameExtensionW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ