DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0e875a89f16b4aba8fbb5ccf45b69109_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e875a89f16b4aba8fbb5ccf45b69109_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0e875a89f16b4aba8fbb5ccf45b69109_JaffaCakes118
Size
173KB
MD5
0e875a89f16b4aba8fbb5ccf45b69109
SHA1
54acf3d3c2d7e3455dcf655ac0dfe4875db16cb5
SHA256
d6ebc778e7ee0c0a2618b1ca33354b153117872135c06a1a06b2a797f3683156
SHA512
b9b64261ab6633e35019f1a4aac143a2e74b6cc3be8036fc481f79117cc733bdd4edadf35ab4d7655cf4aebde06e010cbb8d358ccc3524c9264e979fb3f94a7d
SSDEEP
3072:uA7TNnmUEYZT61szIadM3oNkrsIU6zfTTNuisJCCySaA5Vt4uo:/TNNEqkqFd/6rbfcZakto
Checks for missing Authenticode signature.
resource |
---|
0e875a89f16b4aba8fbb5ccf45b69109_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UuidToStringW
RpcStringFreeW
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
StrCmpIW
StrStrIW
PathStripPathW
UrlEscapeW
SHDeleteKeyW
ExitThread
WaitForSingleObject
CreateThread
Sleep
GetModuleFileNameW
OpenMutexW
GetSystemTime
CreateEventW
OpenProcess
CreateMutexW
GetLastError
InterlockedIncrement
InterlockedDecrement
ExitProcess
lstrcmpW
GetTickCount
SystemTimeToFileTime
GetLocalTime
LocalFree
LoadLibraryA
FreeLibrary
ExpandEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetTempFileNameW
GetEnvironmentVariableW
LocalAlloc
VirtualQuery
LoadLibraryW
GetWindowsDirectoryW
GetSystemInfo
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetProcAddress
CreateProcessW
CloseHandle
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetVolumeInformationW
GetFileType
SetHandleCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
HeapSize
GetModuleHandleA
SetLastError
TlsFree
TlsSetValue
TlsAlloc
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
GetModuleHandleW
TlsGetValue
GetWindowTextW
EnumChildWindows
RealGetWindowClassW
CallWindowProcW
SetWindowLongW
GetWindowThreadProcessId
SetActiveWindow
SendMessageW
GetPropW
RemovePropW
SetWindowTextW
SetPropW
IntersectRect
InflateRect
ClientToScreen
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
GetClassNameW
PostMessageW
OffsetRect
CryptHashData
CryptGetHashParam
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityInfo
CryptGenRandom
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptReleaseContext
RegQueryValueExW
RegCreateKeyW
RegCreateKeyExW
RegSetValueW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
CoInitializeEx
CoCreateInstance
CoTaskMemFree
CoUninitialize
VariantCopy
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ