DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
036a4ac61dc258ca30318a61e370dd2d_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
036a4ac61dc258ca30318a61e370dd2d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
036a4ac61dc258ca30318a61e370dd2d_JaffaCakes118
Size
136KB
MD5
036a4ac61dc258ca30318a61e370dd2d
SHA1
e368dc8f7258f135587e9889d6c4ae5849fd0b9f
SHA256
0c5bcb0b4d6bfd22cf5eb04c3000c41e9f95d504aae37876388ba636b7b79d7f
SHA512
b7c857f109d07bdf14ca009f2bb6064c210d69dd4eeb1d74ba7dc02a0ef7cb17ec761294ce3163487adb5baddb9b5571dc2298ac68f12972e649e6e2851565a9
SSDEEP
3072:cA437PqsWtxW6qzfRaGIrA29aSdjhZpsJ2B8QJteCR:cAq7PWW5zJb29ftrpLPJteo
Checks for missing Authenticode signature.
resource |
---|
036a4ac61dc258ca30318a61e370dd2d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UuidToStringA
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
Netbios
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateGuid
CoCreateInstance
timeGetTime
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
__dllonexit
strtok
toupper
strstr
isxdigit
ispunct
isspace
isalpha
srand
islower
atoi
tmpnam
fopen
fwrite
fclose
wcscmp
?what@exception@@UBEPBDXZ
wcslen
strchr
__mb_cur_max
wctomb
strncpy
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??2@YAPAXI@Z
_CxxThrowException
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
tolower
isgraph
printf
isupper
strerror
??3@YAXPAX@Z
free
malloc
_stricmp
isalnum
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
RegOpenKeyExA
DefWindowProcA
SetTimer
KillTimer
SystemParametersInfoA
SetWindowPos
wsprintfA
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
OpenClipboard
CloseClipboard
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
DispatchMessageA
TranslateMessage
GetFileVersionInfoSizeA
GetFileVersionInfoA
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
StrStrIA
SHGetValueA
SHSetValueA
LocalFree
QueryPerformanceFrequency
GetCurrentProcessId
CreateFileA
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
GetModuleHandleA
GetCurrentThread
InterlockedExchange
GetFullPathNameA
GetWindowsDirectoryA
lstrcpyA
GetTickCount
GetSystemDirectoryA
Sleep
HeapFree
lstrcpynA
FormatMessageA
MoveFileExA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WaitForSingleObject
CreateProcessA
DeleteFileA
OpenProcess
MultiByteToWideChar
FreeEnvironmentStringsA
GetEnvironmentStrings
GetProcessTimes
GetCurrentProcess
GetSystemInfo
GetLastError
lstrcmpiA
lstrcmpA
SleepEx
GetThreadTimes
lstrlenA
GetVersionExA
GetVersion
QueryPerformanceCounter
HeapSize
HeapAlloc
GetProcessHeap
GetEnvironmentVariableA
GetCurrentDirectoryA
SetLastError
GetLocalTime
GetModuleFileNameA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ