DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ff39218ba761c214ff7cf720ccfc4eec_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff39218ba761c214ff7cf720ccfc4eec_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ff39218ba761c214ff7cf720ccfc4eec_JaffaCakes118
Size
289KB
MD5
ff39218ba761c214ff7cf720ccfc4eec
SHA1
03c33acf95c50d3a4ab3c49c3ddbd2003051e2ef
SHA256
a6f395d7d0f0bc4bd1f9b54f5c4ca3998ab584c204c07e38cfadca5911e1593d
SHA512
bf06ef44c930c1cb8db004963a9c70a53f3c240d64043a5955b151db1ca98043f537c96c9ac262d6a0bcaa5b8a375908aceb6eb50efdb731c0a7845f71768712
SSDEEP
6144:pl7D7pQRCoYccIENMmI+PHBfJ+GvHJKDF0n3RqaccHxnKu9pT:pl7DtvodcdNMmI+PHBfJ+mHJKD63RqlG
Checks for missing Authenticode signature.
resource |
---|
ff39218ba761c214ff7cf720ccfc4eec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UuidToStringW
RpcStringFreeW
StrStrIW
SHDeleteKeyW
UrlEscapeW
PathStripPathW
StrCmpIW
lstrlenW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA
ExitThread
GetSystemTime
CreateEventW
CloseHandle
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
SetStdHandle
WriteConsoleA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
GetModuleHandleA
ExitProcess
HeapSize
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
GetFileType
GetWindowTextW
EnumChildWindows
RealGetWindowClassW
CallWindowProcW
SetWindowLongW
SetPropW
GetWindowThreadProcessId
PostMessageW
SendMessageW
GetPropW
RemovePropW
OffsetRect
IntersectRect
InflateRect
ClientToScreen
SetWindowTextW
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
GetClassNameW
SetActiveWindow
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityInfo
RegSetValueExW
RegQueryValueExW
RegCreateKeyW
RegCloseKey
CoUninitialize
CoInitializeEx
CoTaskMemFree
CoCreateInstance
VariantCopy
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ