DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
39a91d3e9334fa2cb00fe046c1a9b31b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
39a91d3e9334fa2cb00fe046c1a9b31b_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
39a91d3e9334fa2cb00fe046c1a9b31b_JaffaCakes118
Size
76KB
MD5
39a91d3e9334fa2cb00fe046c1a9b31b
SHA1
1a3b4239ee650d793725858135183d6f8c06007b
SHA256
1dc2656ba80766c61247f66386774ca4322d9df7c74896f24bbb200353dd1a4a
SHA512
2914601224d8a233e72099b8666533a1cfdbaf0e7fb01db67318035cafe6c94de0a93e0e674cbfa094ddaa4683381ba56636a9d75d7ea6fb7ffce125dd905c2f
SSDEEP
1536:lYXAElIj/xDw0hvXc98GNl7IkZTiGJwSqeCYdzoiZec4/4:2AElIj/xDzWlIqPXdzoiu
Checks for missing Authenticode signature.
resource |
---|
39a91d3e9334fa2cb00fe046c1a9b31b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetFileTime
CreateFileA
MultiByteToWideChar
lstrcpyA
WideCharToMultiByte
FileTimeToSystemTime
GetSystemTime
GetLastError
SetEndOfFile
LoadLibraryA
GetProcAddress
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
SetFilePointer
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetWindowsDirectoryA
lstrlenW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
ResumeThread
CreateThread
TlsSetValue
ExitThread
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
LCMapStringA
LCMapStringW
WriteFile
ReadFile
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
SetWindowTextA
FindWindowExA
GetWindowTextA
GetUserNameA
CoCreateInstance
SysFreeString
LoadRegTypeLi
SysStringLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantCopy
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetGetConnectedState
InternetReadFile
SHGetValueA
UrlUnescapeA
SHDeleteKeyA
SHSetValueA
ord30
ord32
ord15
ord23
ord58
ord18
ord21
ord16
ord31
ord57
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ