DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InstallTVWizard
WinlogonUnlockEvent
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4ba847a6abe88d2de84696ff36105dd0.dll
Resource
win7-20240708-en
Target
JaffaCakes118_4ba847a6abe88d2de84696ff36105dd0
Size
266KB
MD5
4ba847a6abe88d2de84696ff36105dd0
SHA1
08c50f7fa556edb73e12751bf46fcb165451cdf6
SHA256
0f14252aa4405954d45e4848dd68be218e67fc66ac7e2f833fce8f20b34dcaa5
SHA512
6bbe18cce4d4059e22bb567b79c494688182782dfa73d3053922f0351bfd0ca274c2edf1d8b2954bce5fe17e8ee683ca33ca031e5e48ac8ac9093b1cc4b7dfcd
SSDEEP
3072:fHIbZrZeazcZgbAr0uiND880HlTJT5I0tdQu7Pd8Y2Lyp0lFmy/p/yr9rn10Dfww:7aGgcJipRuQQppQFmgY+4aQ1kmIW
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_4ba847a6abe88d2de84696ff36105dd0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetLastError
GlobalLock
GlobalAlloc
Sleep
InterlockedDecrement
SetEvent
OpenEventA
LocalFree
FormatMessageA
CreateMutexA
ReleaseMutex
WideCharToMultiByte
lstrlenW
RaiseException
lstrlenA
DisableThreadLibraryCalls
GetModuleFileNameA
GlobalUnlock
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetProcessHeap
FlushFileBuffers
CreateFileA
GlobalFree
MultiByteToWideChar
GetModuleHandleA
GetSystemPowerStatus
GetLastError
CloseHandle
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
TerminateProcess
LoadLibraryA
GetProcAddress
GetCurrentProcess
FreeLibrary
GetVersionExA
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
lstrcmpiA
EnterCriticalSection
GetLocaleInfoA
GetModuleHandleW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleCP
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
HeapDestroy
VirtualFree
HeapReAlloc
HeapSize
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
ReadFile
BroadcastSystemMessageA
ChangeDisplaySettingsA
PostMessageA
GetSystemMetrics
EnumDisplayDevicesA
CharNextW
CharNextA
PostThreadMessageA
EnumDisplaySettingsA
RegisterWindowMessageA
ExtEscape
CreateDCA
DeleteDC
GetDeviceCaps
RegQueryInfoKeyA
RegSetValueExW
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
GetSecurityInfo
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityInfo
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InstallTVWizard
WinlogonUnlockEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE