DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
063825bb041aa42f494d8161775cd750_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
063825bb041aa42f494d8161775cd750_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
063825bb041aa42f494d8161775cd750_JaffaCakes118
Size
160KB
MD5
063825bb041aa42f494d8161775cd750
SHA1
b11f2e93a3388c484150fd924c73d90f79a1222a
SHA256
1db39830024da9e54c2c87be26efca1ef7e50419f7a97065a736f470bb562e07
SHA512
b73935bd1477b366efc734fd614bb31dc8c0f931a55a56dc416217ad9d5cb3614c9f1e0bd9058177a0414b8cc24ff0eea38b848f0b928164c107d41d2d9134e4
SSDEEP
1536:8Jmuqu2jV2Y7H7rrHzCb57SF7iLn4c/xeNT2a3uYNeSp2WH19AsahICS4Ae3okX2:8HIrmJJpeoYNPmK43okv7G
Checks for missing Authenticode signature.
resource |
---|
063825bb041aa42f494d8161775cd750_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ShowWindow
CreateWindowExA
RegisterClassExA
EnumWindows
EnumChildWindows
SetWindowPos
SystemParametersInfoA
DispatchMessageA
GetWindowThreadProcessId
GetMessageA
wsprintfA
KillTimer
SetTimer
DefWindowProcA
GetClassNameA
TranslateMessage
IsBadCodePtr
IsBadReadPtr
MoveFileExA
CloseHandle
WaitForSingleObject
CreateProcessA
GetProcAddress
LoadLibraryA
DeleteFileA
GetSystemDirectoryA
GetLocalTime
OpenProcess
GetCurrentProcessId
CreateFileA
SleepEx
GetModuleFileNameA
GetTickCount
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
FreeLibrary
RtlUnwind
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
HeapCreate
HeapDestroy
GetVersionExA
ReadFile
SetEndOfFile
GetEnvironmentVariableA
LCMapStringW
SetFilePointer
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
LocalFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
WideCharToMultiByte
HeapFree
HeapReAlloc
GetLastError
MultiByteToWideChar
GetCommandLineA
GetVersion
RaiseException
EnterCriticalSection
LeaveCriticalSection
WriteFile
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetFileAttributesA
GetFileType
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
StrStrIA
CoInitialize
CoCreateInstance
CoCreateGuid
VariantInit
SysAllocString
GetErrorInfo
SHSetValueA
SHGetValueA
Netbios
UuidToStringA
GetModuleBaseNameA
EnumProcesses
EnumProcessModules
HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ