DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
15cce2bfb4a682a92983d71346c03999_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15cce2bfb4a682a92983d71346c03999_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
15cce2bfb4a682a92983d71346c03999_JaffaCakes118
Size
221KB
MD5
15cce2bfb4a682a92983d71346c03999
SHA1
babf3dbce5d93d414287c24826f70955f5bc2000
SHA256
3e4ddb92aec61b985bc0d6e74628ec6aaff8dc559c392c7d993cfe8b734e0d86
SHA512
d24376d98c0be2dc86f3a86570923138ded49566ba0946479a9f7f6dd779188c668e910eef5fe890195b7bac4393c19691bf7c96e059ae479e092b0e5335c123
SSDEEP
3072:8RPxbDFqwfR9swEoyGbyqMoq9EgkAvF3g9e+T6YkkGztrj9INkETZ4PIhQeXZOWn:8XfQwZ9D9Xv9Avhg97uYVGzU3dn9
Checks for missing Authenticode signature.
resource |
---|
15cce2bfb4a682a92983d71346c03999_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
InterlockedDecrement
lstrlenW
GetShortPathNameW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
lstrlenA
SizeofResource
LoadResource
FindResourceW
InterlockedIncrement
LoadLibraryExW
lstrcmpiW
lstrcpynW
HeapDestroy
GetProcAddress
LoadLibraryW
lstrcpyW
lstrcatW
SetEnvironmentVariableA
CompareStringW
CompareStringA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GlobalFindAtomW
GlobalAddAtomW
GetTempPathW
GetTempFileNameW
GetLastError
Sleep
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
CloseHandle
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsWindow
GetClientRect
CharNextW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueW
SHLoadInProc
ShellExecuteW
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
VarUI4FromStr
SysAllocString
RegisterTypeLi
VMProtectBegin
VMProtectEnd
URLDownloadToFileW
PathRenameExtensionW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ