start
test
Static task
static1
Behavioral task
behavioral1
Sample
fda9f2c5cb9f0d8f7ea5e6f939b1ebcd_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fda9f2c5cb9f0d8f7ea5e6f939b1ebcd_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fda9f2c5cb9f0d8f7ea5e6f939b1ebcd_JaffaCakes118
Size
384KB
MD5
fda9f2c5cb9f0d8f7ea5e6f939b1ebcd
SHA1
1c7c26f534f9c72f29526bb55c6fe881a3763fd2
SHA256
504a87776d4f0f1d29f3585d179c4f9aa6892880d7ba8f58b2bf5936c9508c18
SHA512
c6a99477c25da5910ddae17306c23e75f3a2d0e323fdbdc03d5d8b1aac6abcfec3c825d014d89614ffe7c3dd42d2da90ae6e07fe18c89adbb7851c4d197d5a35
SSDEEP
6144:V2ZUNWU4Bln4prTRfItedutMYfYujLeTBivuVgiyXZqXx1xi6t5soYq9u2TkV:EmsnsvNotheTAvu/B1s6tQ2
Checks for missing Authenticode signature.
resource |
---|
fda9f2c5cb9f0d8f7ea5e6f939b1ebcd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord833
ord2814
ord3876
ord6069
ord2117
ord6000
ord6067
ord5655
ord6334
ord3092
ord2642
ord6199
ord2302
ord2370
ord2289
ord529
ord656
ord796
ord4853
ord4376
ord3610
ord6662
ord926
ord500
ord2086
ord5860
ord6142
ord772
ord2763
ord654
ord541
ord341
ord801
ord6929
ord758
ord475
ord4710
ord4234
ord641
ord324
ord3597
ord4425
ord5280
ord1775
ord6052
ord2514
ord4998
ord5265
ord6453
ord1146
ord2859
ord3571
ord6282
ord6283
ord4277
ord2820
ord6383
ord5440
ord6215
ord4299
ord5787
ord3573
ord2379
ord6380
ord6197
ord562
ord816
ord5875
ord5789
ord3626
ord3619
ord4275
ord1949
ord2107
ord2044
ord2448
ord2841
ord6394
ord5834
ord5450
ord3663
ord536
ord2781
ord4058
ord3178
ord941
ord4278
ord5856
ord5773
ord4129
ord567
ord1233
ord6442
ord818
ord3742
ord4627
ord3402
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord2256
ord1200
ord2726
ord2614
ord924
ord565
ord817
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5715
ord5289
ord5307
ord4699
ord4079
ord5303
ord5300
ord3346
ord2396
ord4226
ord1948
ord5572
ord2764
ord6877
ord4202
ord5683
ord5710
ord2860
ord323
ord1640
ord5785
ord1168
ord2405
ord2414
ord640
ord6385
ord354
ord5186
ord3318
ord5442
ord1979
ord1641
ord289
ord613
ord2915
ord858
ord939
ord1187
ord665
ord533
ord5194
ord3811
ord3337
ord2818
ord6407
ord1997
ord798
ord540
ord860
ord535
ord537
ord356
ord2770
ord1980
ord668
ord800
ord1575
ord1182
ord342
ord1253
ord823
ord825
ord861
getenv
_flushall
system
_purecall
sprintf
_vsnprintf
_except_handler3
__CxxFrameHandler
exit
memcpy
memset
abs
_ftol
_callnewh
??0exception@@QAE@ABV0@@Z
memcmp
strcat
_beginthreadex
strstr
_strupr
strncpy
atoi
strncmp
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_mbscmp
_strlwr
strrchr
wcscmp
realloc
strlen
printf
time
rand
srand
_CxxThrowException
strcmp
strcpy
fprintf
_iob
free
calloc
malloc
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
_CIpow
_CIacos
localtime
strftime
wcsstr
_mbsicmp
sscanf
memmove
GetConsoleScreenBufferInfo
ReadConsoleOutputA
ReadConsoleOutputCharacterA
GetStdHandle
WriteConsoleInputA
TerminateThread
MoveFileA
SetFileAttributesA
DeleteFileA
WinExec
GlobalFree
GetTickCount
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalReAlloc
CreateEventA
WaitForSingleObject
SetEvent
GetSystemDirectoryA
TerminateProcess
FormatMessageA
lstrlenA
LocalFree
OutputDebugStringA
Sleep
GetCommandLineA
SetUnhandledExceptionFilter
GetModuleFileNameA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
CreateThread
GetCurrentThreadId
GetCurrentProcessId
Thread32First
OpenThread
Thread32Next
CreateToolhelp32Snapshot
Module32First
LoadLibraryA
FreeLibrary
Module32Next
CloseHandle
CreateProcessA
CopyFileA
SetCurrentDirectoryA
AllocConsole
FreeConsole
WriteFile
LeaveCriticalSection
EnterCriticalSection
ReadFile
OpenProcess
DeleteCriticalSection
WaitForMultipleObjectsEx
InitializeCriticalSection
SetStdHandle
CreatePipe
Process32Next
Process32First
GetVersionExA
GetWindowsDirectoryA
LocalAlloc
WideCharToMultiByte
GetDiskFreeSpaceExA
lstrcpyA
GetDriveTypeA
FindClose
FindNextFileA
FindFirstFileA
lstrcatA
GetFileSize
CreateFileA
SetFilePointer
CreateDirectoryA
RemoveDirectoryA
GetStartupInfoA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetExitCodeProcess
GetTempPathA
GetVersion
lstrcpynA
lstrcmpA
UnmapViewOfFile
DeviceIoControl
DuplicateHandle
VirtualFreeEx
ReadProcessMemory
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
lstrlenW
GetExitCodeThread
SetLastError
MultiByteToWideChar
VirtualQueryEx
GetSystemInfo
HeapFree
HeapAlloc
GetProcessHeap
GetEnvironmentVariableW
QueryPerformanceFrequency
QueryPerformanceCounter
InterlockedDecrement
GetVolumeInformationA
GetComputerNameA
lstrcmpiA
GetLogicalDrives
GlobalMemoryStatus
Beep
GetPrivateProfileStringA
ExitThread
ExitProcess
CreateMutexA
GetLastError
MapViewOfFile
GetWindowRect
GetWindowDC
GetSystemMetrics
IsWindowVisible
GetTopWindow
GetWindowPlacement
WindowFromPoint
ScreenToClient
SwapMouseButton
EnumDisplayDevicesA
IsWindowUnicode
RegisterHotKey
UnregisterHotKey
CopyRect
SetRect
LoadBitmapA
GetDCEx
KillTimer
EndDialog
SetTimer
GetDC
SetWindowPos
DialogBoxParamA
RegisterWindowMessageA
EnumChildWindows
GetAsyncKeyState
mouse_event
keybd_event
EnableWindow
SystemParametersInfoA
ExitWindowsEx
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
ReleaseDC
GetDesktopWindow
GetKeyState
GetFocus
GetKeyNameTextA
InternalGetWindowText
CallNextHookEx
GetForegroundWindow
SetWindowsHookExA
UnhookWindowsHookEx
SetForegroundWindow
MessageBoxA
GetWindowTextA
GetWindowThreadProcessId
ShowWindow
GetWindowLongA
SendMessageTimeoutA
GetWindow
EnumWindows
CharToOemA
wsprintfA
IsCharAlphaNumericA
GetCursorPos
FillRect
InvalidateRect
SetWindowRgn
SetWindowLongA
DefWindowProcA
LoadIconA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
GetClientRect
LoadCursorA
SendMessageA
CloseWindow
CreateWindowExA
GetProcessWindowStation
OpenWindowStationA
SetProcessWindowStation
CloseWindowStation
OpenInputDesktop
GetUserObjectInformationA
SetThreadDesktop
GetThreadDesktop
OpenDesktopA
OpenClipboard
DestroyIcon
GetIconInfo
PostQuitMessage
PostThreadMessageA
IsRectEmpty
GetCursor
PostMessageA
CloseDesktop
GetClassNameA
SetCursorPos
CreateDIBSection
BitBlt
DeleteObject
GetObjectA
CreateCompatibleDC
SelectObject
GetDIBits
DeleteDC
CreateBitmap
CreatePatternBrush
PatBlt
ExtCreateRegion
CombineRgn
CreateSolidBrush
CreateFontIndirectA
BeginPath
EndPath
PathToRegion
GetDeviceCaps
GetBitmapBits
CreateDCA
GetPixel
GetStockObject
SelectPalette
RealizePalette
CreateCompatibleBitmap
GetSecurityDescriptorDacl
ReportEventA
RegisterEventSourceA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RevertToSelf
BuildTrusteeWithSidA
AllocateAndInitializeSid
FreeSid
SetKernelObjectSecurity
SetSecurityDescriptorDacl
MakeAbsoluteSD
GetSecurityInfo
RegEnumKeyA
RegEnumValueA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
GetUserNameA
SetSecurityInfo
RegEnumKeyExA
RegDeleteValueA
EnumServicesStatusA
DeleteService
ChangeServiceConfigA
ControlService
StartServiceA
OpenSCManagerA
CloseServiceHandle
OpenServiceA
QueryServiceConfigA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
CreateProcessAsUserA
DuplicateTokenEx
ImpersonateLoggedOnUser
GetKernelObjectSecurity
SetEntriesInAclA
DeregisterEventSource
ShellExecuteA
SHGetFileInfoA
ExtractIconExA
SHGetSpecialFolderPathA
CoTaskMemFree
CreateStreamOnHGlobal
CoSetProxyBlanket
CoInitializeEx
CoInitializeSecurity
CoInitialize
CoCreateInstance
CoUninitialize
ord251
VariantClear
VariantInit
VariantChangeType
SysFreeString
GetErrorInfo
SysAllocString
URLDownloadToFileA
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?nothrow@std@@3Unothrow_t@1@B
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1_Lockit@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0Init@ios_base@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??0_Lockit@std@@QAE@XZ
InternetCheckConnectionA
InternetGetConnectedState
HttpQueryInfoA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
ICSeqCompressFrameStart
ICClose
ICOpen
ICSeqCompressFrame
ICSeqCompressFrameEnd
ICSendMessage
ICCompressorFree
SHDeleteKeyA
SHDeleteValueA
ImmGetContext
ImmGetCompositionStringA
ImmReleaseContext
ZwOpenSection
RtlInitUnicodeString
ZwOpenFile
ZwQuerySystemInformation
_strnicmp
_stricmp
_strcmpi
_wcsicmp
wcslen
mixerGetID
mciSendStringA
waveOutGetNumDevs
waveOutGetDevCapsA
mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
mixerClose
sndPlaySoundA
timeGetTime
waveInUnprepareHeader
waveInStop
waveInReset
waveInClose
waveInGetErrorTextA
waveOutSetVolume
waveOutOpen
waveOutGetErrorTextA
waveOutClose
waveOutReset
waveOutUnprepareHeader
waveOutWrite
waveOutPrepareHeader
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
listen
inet_ntoa
WSAAsyncSelect
setsockopt
socket
__WSAFDIsSet
gethostname
WSACleanup
WSAStartup
recv
send
WSARecv
WSASend
recvfrom
getpeername
WSAAsyncGetHostByName
sendto
getsockname
ntohs
WSACloseEvent
WSACreateEvent
WSASocketA
bind
htonl
htons
accept
select
ioctlsocket
connect
gethostbyname
inet_addr
WSAGetLastError
closesocket
WSAGetOverlappedResult
WSAResetEvent
WSAWaitForMultipleEvents
WSAConnect
GetAdaptersInfo
start
test
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ