DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f35a4d6f3dc2015cf3c858c6fde14ba6_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f35a4d6f3dc2015cf3c858c6fde14ba6_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f35a4d6f3dc2015cf3c858c6fde14ba6_JaffaCakes118
Size
72KB
MD5
f35a4d6f3dc2015cf3c858c6fde14ba6
SHA1
c88e98b551f4316bfcda53b2c8f2ab1d62152a9b
SHA256
432ed3c32fbbc22f3ceaaec1da03732ec79a1a6215a20890f3a899454720e11c
SHA512
75383fdf07852d9769d645ae1c20eed2ecbbcb456c3c8d0e9b377c93656be5fd48430240b1765ab5c7f2fb04408f06b1d50679ac0e6b80aa6c833712b6d6eb3a
SSDEEP
1536:/Mzas04gQT1whydLICS4ASiKDywJJQlLaneBLGy:/Mzas02TkyWA7ywJJpNy
Checks for missing Authenticode signature.
resource |
---|
f35a4d6f3dc2015cf3c858c6fde14ba6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_stricmp
??0exception@@QAE@ABV0@@Z
wcscmp
wcslen
??0exception@@QAE@XZ
printf
__CxxFrameHandler
_CxxThrowException
??1exception@@UAE@XZ
??3@YAXPAX@Z
strerror
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
tolower
strtok
toupper
strstr
malloc
free
isalnum
atoi
tmpnam
fopen
fwrite
fclose
strncpy
strchr
isxdigit
ispunct
isalpha
srand
islower
??2@YAPAXI@Z
?what@exception@@UBEPBDXZ
Netbios
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
InternetSetOptionA
InternetOpenA
InternetOpenUrlA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
GetErrorInfo
VariantClear
SysAllocString
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetModuleBaseNameA
EnumProcessModules
EnumProcesses
UuidToStringA
SHGetValueA
StrStrIA
SHSetValueA
EnumWindows
SystemParametersInfoA
SetWindowPos
EnumChildWindows
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
SetTimer
KillTimer
GetWindowThreadProcessId
GetClassNameA
wsprintfA
DefWindowProcA
timeGetTime
CoInitialize
CoCreateGuid
CoCreateInstance
HeapSize
GetLastError
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableA
GetCurrentDirectoryA
lstrlenA
DisableThreadLibraryCalls
CloseHandle
OpenProcess
GetCurrentProcessId
SleepEx
GetThreadTimes
GetCurrentThread
GetProcessTimes
GetCurrentProcess
GetSystemDirectoryA
FreeLibrary
GetProcAddress
HeapAlloc
LocalFree
FormatMessageA
SetLastError
InterlockedExchange
GetFullPathNameA
lstrcpyA
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetLocalTime
CreateFileA
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
MultiByteToWideChar
HeapFree
GetProcessHeap
GetModuleFileNameA
GetVersionExA
GetWindowsDirectoryA
GetSystemInfo
Sleep
GetVersion
GetModuleHandleA
LoadLibraryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ