shutdown
start
Static task
static1
Behavioral task
behavioral1
Sample
eb4ca0f4d2027141a4943b4c4e6c6ddf_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb4ca0f4d2027141a4943b4c4e6c6ddf_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
eb4ca0f4d2027141a4943b4c4e6c6ddf_JaffaCakes118
Size
64KB
MD5
eb4ca0f4d2027141a4943b4c4e6c6ddf
SHA1
43de39176987e6b20323ea1a0669dbb234559245
SHA256
e6b950c42c23bdbe2675f21c1cd2a5c2bf4ec654983f3778baf470495992be8b
SHA512
835af44aa0629cca35970ca341662f02290b5494127cf407b9c5cc9b444bf50c6b908fd4a2f2b195e53f8c6f475920626f50ac49cd614fb9b80cf8d885de1190
SSDEEP
768:zuDPlj18yK9vMzPyVRb4QwNugsMhjRR0Vc508fsS92MnkoQsoiGgqx/W+:KZj+v6PynM4gsMhjs+08khMnKilqx/t
Checks for missing Authenticode signature.
resource |
---|
eb4ca0f4d2027141a4943b4c4e6c6ddf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord354
ord665
ord5186
ord3318
ord5442
ord1979
ord3811
ord1182
ord342
ord1253
ord1168
ord823
ord825
_stricmp
_access
sprintf
_splitpath
_beginthreadex
strstr
_strlwr
rand
time
srand
__CxxFrameHandler
_strupr
memmove
fclose
fwrite
fopen
atoi
strchr
memchr
atol
_ltoa
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
_except_handler3
VirtualAllocEx
lstrlenW
OpenProcess
lstrlenA
Module32NextW
lstrcmpiW
Module32FirstW
CreateToolhelp32Snapshot
Process32Next
Process32First
Sleep
GetModuleFileNameA
GetLastError
GetVersionExA
CreateFileA
DeviceIoControl
CreateEventA
GetSystemDirectoryA
GetWindowsDirectoryA
GetVolumeInformationA
GetTempPathA
GetTempFileNameA
DeleteFileA
CreateProcessA
GetFileSize
CreateFileMappingA
UnmapViewOfFile
SetFileAttributesA
CloseHandle
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
GetProcAddress
GetModuleHandleA
WriteProcessMemory
wsprintfW
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
CreateProcessAsUserA
GetUserNameA
OpenProcessToken
RegCreateKeyA
SetSecurityDescriptorDacl
URLDownloadToFileA
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?close@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1ios_base@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xran@std@@YAXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??_8?$basic_ifstream@DU?$char_traits@D@std@@@std@@7B@
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Xlen@std@@YAXXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
InternetGetConnectedState
DeleteUrlCacheEntry
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetCrackUrlA
Netbios
shutdown
start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ