DllCanUnloadNow
DllGetClassObject
DllPreinstall
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0e04bdbabe255ba3be4e914d4579f0ab_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e04bdbabe255ba3be4e914d4579f0ab_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0e04bdbabe255ba3be4e914d4579f0ab_JaffaCakes118
Size
363KB
MD5
0e04bdbabe255ba3be4e914d4579f0ab
SHA1
822a9ea44071ea95d79537487ac39d3ff78088f9
SHA256
a2380df3c06afc6bf37156106c692943dfcf482fede196cdc6460e7c1c0976fd
SHA512
2d709a978ebe18495ff488f8747326f1a9bf6966e8a05d4c55b8b5e24791db4c3baef22a1d1c527fda27989ddfa71ea915700997e65e152f89212a0f1a817b9d
SSDEEP
6144:jm+552HgVwUEVyl/V+a9Ws+nDPX2INKH6GXFuDTCdQbQ:jmO5kgVwUEVyl/Ma9R+DPXJNKHl8SdX
Checks for missing Authenticode signature.
resource |
---|
0e04bdbabe255ba3be4e914d4579f0ab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHDeleteKeyW
StrCmpIW
UrlEscapeW
PathStripPathW
StrStrIW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA
ExitThread
GetSystemTime
CreateEventW
CloseHandle
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
lstrlenW
CreateFileA
FlushFileBuffers
TerminateProcess
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
RaiseException
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetModuleHandleA
WriteFile
GetClassNameW
GetWindowTextW
EnumChildWindows
CallWindowProcW
SetWindowLongW
SetPropW
GetWindowThreadProcessId
SetActiveWindow
PostMessageW
SendMessageW
GetPropW
RemovePropW
OffsetRect
IntersectRect
InflateRect
ClientToScreen
SetWindowTextW
PeekMessageW
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageW
RealGetWindowClassW
SetSecurityInfo
RegSetValueExW
RegQueryValueExW
RegCreateKeyW
RegCloseKey
GetSecurityDescriptorSacl
CoInitializeEx
CoTaskMemFree
CoUninitialize
CoCreateInstance
VariantCopy
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllPreinstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ