DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2828b4d2539ad4b147fb7598bdc34e3b_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2828b4d2539ad4b147fb7598bdc34e3b_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2828b4d2539ad4b147fb7598bdc34e3b_JaffaCakes118
Size
2.5MB
MD5
2828b4d2539ad4b147fb7598bdc34e3b
SHA1
103689ecd87fd943d0d22e2c31106a02ae7c93e2
SHA256
05c0536f30cf0508c88ea29090cdade982b07f80c6ea9200948f176e68488d80
SHA512
8884216841cf0b3f6acd55fa4c53b3682055bd72cb2d979573b3d564a79e4d3cd76e092d6779bf79c0b55d61c1a751e4cb3b88856a9ed95bf83f28f633e986b0
SSDEEP
49152:bRhQ7FHPn2dTrARciqCnyKR5R0P+aW/JH1Q/G6omDmPnT8kcn:bRa7Fvn2dTQFqCnhRM+aiMHoSkA7
Checks for missing Authenticode signature.
resource |
---|
2828b4d2539ad4b147fb7598bdc34e3b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedExchangeAdd
DeleteCriticalSection
SetFilePointerEx
LockFile
CreateMailslotW
AddAtomA
SetStdHandle
GetProfileStringW
InitializeCriticalSection
GetLogicalDriveStringsW
GlobalDeleteAtom
LocalFileTimeToFileTime
GetFileInformationByHandle
ProcessIdToSessionId
FindAtomW
FindNextVolumeW
VirtualAlloc
EnumResourceNamesW
GetProfileIntA
VerSetConditionMask
lstrlenW
CreateFileMappingA
FindResourceExW
LoadLibraryA
QueueUserWorkItem
GetProcAddress
CreateFileMoniker
PropVariantCopy
MkParseDisplayName
SendInput
CharToOemA
GetKeyNameTextW
GetWindowTextW
OpenDesktopW
GetPropW
GetMenuCheckMarkDimensions
SetForegroundWindow
InsertMenuW
LookupIconIdFromDirectory
GetSystemMetrics
SetMenuItemBitmaps
CharPrevW
CreateDialogIndirectParamW
TabbedTextOutW
ScrollWindowEx
CharUpperBuffW
FreeDDElParam
CreateDialogParamA
SendMessageTimeoutW
IsCharAlphaW
SetScrollPos
GetCaretBlinkTime
CharToOemBuffA
SetActiveWindow
GetMenuItemInfoW
SetDlgItemTextW
LoadMenuA
InsertMenuA
UrlCreateFromPathW
PathGetCharTypeA
PathRemoveFileSpecA
PathMatchSpecW
PathSetDlgItemPathW
PathUndecorateW
PathUnquoteSpacesW
SHRegGetValueW
PathFindExtensionW
EnumDependentServicesW
IsTextUnicode
CredIsMarshaledCredentialW
RegOpenKeyExA
RegCloseKey
CredGetSessionTypes
GetNumberOfEventLogRecords
SHGetSpecialFolderPathW
SHGetSettings
SetDIBColorTable
CreateScalableFontResourceA
CloseFigure
UpdateColors
PtInRegion
StartPage
TextOutA
Arc
CreatePalette
SetViewportExtEx
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ