DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ec863f49c79cf456fd304a90f28f178d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec863f49c79cf456fd304a90f28f178d_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ec863f49c79cf456fd304a90f28f178d_JaffaCakes118
Size
188KB
MD5
ec863f49c79cf456fd304a90f28f178d
SHA1
f99b5b86713da54069bfabad506a8e48a6356145
SHA256
e55f422150ef05c4098b5b8d84c77d41db48311b8c5a51ca1658e2db846dfbba
SHA512
79eab7bba675a0ade8ebea538d4c0d0ca02fcb934cc28fe760ce6c3786f7ef237d689a4ccc2563dd132137ff6dab576126d2d49a3161fc5e3013a872ed0c7292
SSDEEP
3072:IFVHlI42ZPnjqf6nJeLDCRvknXTe0wkzfI1JkhQKbUBXjxA+yZ:ILHK4KPLnJe3cknjnwkzzhQEU5j++
Checks for missing Authenticode signature.
resource |
---|
ec863f49c79cf456fd304a90f28f178d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetErrorInfo
VariantClear
SysAllocString
SysFreeString
timeGetTime
CoTaskMemFree
CoInitialize
CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
SHSetValueA
SHGetValueA
StrStrIA
Netbios
GetModuleBaseNameA
EnumProcessModules
EnumProcesses
islower
wcslen
?what@exception@@UBEPBDXZ
wcscmp
isalnum
isxdigit
toupper
strtok
strstr
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
isupper
??2@YAPAXI@Z
__mb_cur_max
srand
isspace
strtol
atoi
tmpnam
fopen
fwrite
fclose
free
isgraph
strncpy
strchr
printf
??1exception@@UAE@XZ
??0exception@@QAE@XZ
_CxxThrowException
malloc
tolower
??0exception@@QAE@ABV0@@Z
ispunct
strerror
__CxxFrameHandler
??3@YAXPAX@Z
isalpha
wctomb
UuidToStringA
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
wsprintfA
RegisterClassExA
CreateWindowExA
ShowWindow
DefWindowProcA
TranslateMessage
DispatchMessageA
OpenClipboard
CloseClipboard
SetTimer
KillTimer
EnumChildWindows
EnumWindows
GetWindowThreadProcessId
GetClassNameA
SetWindowPos
SystemParametersInfoA
GetMessageA
GetCurrentDirectoryA
HeapFree
MultiByteToWideChar
Sleep
GetCurrentProcess
GetProcessTimes
GetCurrentThread
GetThreadTimes
CreateFileA
GetCurrentProcessId
GetSystemInfo
SleepEx
GetModuleHandleA
GetLocalTime
DeleteFileA
CreateProcessA
GetTickCount
QueryPerformanceCounter
WaitForSingleObject
MoveFileExA
LoadLibraryA
OpenProcess
QueryPerformanceFrequency
lstrcpyA
lstrlenA
GetVersionExA
GetEnvironmentVariableA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetLastError
LocalFree
FormatMessageA
GetWindowsDirectoryA
HeapSize
HeapAlloc
GetVersion
GetProcessHeap
SetLastError
GetModuleFileNameA
InterlockedExchange
GetFullPathNameA
lstrcpynA
lstrcmpiA
lstrcmpA
FreeLibrary
CloseHandle
CreateRemoteThread
WriteProcessMemory
GetSystemDirectoryA
GetProcAddress
VirtualAllocEx
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ