DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2599959b61462b6866dab65d106c1d86_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2599959b61462b6866dab65d106c1d86_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2599959b61462b6866dab65d106c1d86_JaffaCakes118
Size
360KB
MD5
2599959b61462b6866dab65d106c1d86
SHA1
daa998616ce924f47e9b22d446fe9968f3517c23
SHA256
06d8a1df7a3ca7487725363c645e57f2bc30f106ab6a8d33380db4034be1e355
SHA512
c391fe47151305d0d0e0c47de1ab51cba08fa0557fa32631e5454c2f9d99dfea0fb742804691d48e19e99a0f500c2b411b6e6edb0f038eefedba538259964969
SSDEEP
6144:l1nwdqakkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkU:lK
Checks for missing Authenticode signature.
resource |
---|
2599959b61462b6866dab65d106c1d86_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrCpyW
StrCatW
StrCpyNW
StrNCatW
StrCmpW
StrCmpIW
StrStrW
CreateThread
LoadLibraryExA
CreateMutexA
ResetEvent
ExitThread
CreateFileMappingW
GetTickCount
Sleep
GetProcessHeap
lstrcatA
lstrcpyA
InitializeCriticalSection
GetBinaryTypeW
CloseHandle
GetLastError
lstrcpynA
GetProcAddress
FreeLibrary
LoadLibraryA
WideCharToMultiByte
GetModuleFileNameA
MultiByteToWideChar
GetTimeFormatA
GetDateFormatA
lstrcmpA
lstrcmpiA
GetModuleHandleW
PulseEvent
CreateEventA
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
WaitForSingleObject
DispatchMessageW
TranslateMessage
GetMessageW
SetWindowsHookExW
CreateWindowExW
MoveWindow
SendMessageW
CallNextHookEx
GetClientRect
ShowWindow
DefWindowProcW
DestroyWindow
GetSystemMetrics
wsprintfA
GetWindowRect
SetTimer
GetClassNameA
GetWindow
RegisterClassExW
StringFromGUID2
CoCreateGuid
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
SysAllocStringByteLen
VariantClear
VariantCopy
SafeArrayDestroy
SysStringLen
SafeArrayLock
SafeArrayUnlock
SysAllocString
VariantInit
SysAllocStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ