DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
06905c5e07e6ee8a99a777fbbbaacea5_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
06905c5e07e6ee8a99a777fbbbaacea5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
06905c5e07e6ee8a99a777fbbbaacea5_JaffaCakes118
Size
136KB
MD5
06905c5e07e6ee8a99a777fbbbaacea5
SHA1
b2d8a28cb805dd573f951b727970ede66164380a
SHA256
10a843f6fef72ea1ad0af9c4dfc9dd44554922df6d64c4753ee6ba98e8f5f1b7
SHA512
eb09bf1ff5d5dfabd77a965592ad6db979effa4e5d42496a2d1227db9ea6a44af1da1ad03ca8b3dd20cfc06fd22bbe2513fb9424e4777b84215456af4620932d
SSDEEP
3072:ROmkSWt6wf1jjkq94uP0nNbNtlJB6LBg4:jw6wdjP4ucNZtkdg
Checks for missing Authenticode signature.
resource |
---|
06905c5e07e6ee8a99a777fbbbaacea5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SysFreeString
GetErrorInfo
SysAllocString
VariantClear
timeGetTime
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
RegCloseKey
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_onexit
__dllonexit
strtol
atoi
tmpnam
fopen
fwrite
fclose
strstr
strtok
toupper
free
srand
isalnum
wcscmp
wcslen
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@XZ
strchr
_CxxThrowException
__CxxFrameHandler
strerror
malloc
printf
??2@YAPAXI@Z
??3@YAXPAX@Z
isupper
__mb_cur_max
wctomb
isspace
isalpha
ispunct
isgraph
tolower
islower
isxdigit
strncpy
??0exception@@QAE@ABV0@@Z
_stricmp
SHSetValueA
StrStrIA
SHGetValueA
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateGuid
InternetCloseHandle
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
Netbios
SystemParametersInfoA
EnumWindows
wsprintfA
OpenClipboard
CloseClipboard
EnumChildWindows
GetWindowThreadProcessId
GetClassNameA
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
SetTimer
KillTimer
SetWindowPos
UuidToStringA
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetLocalTime
GetCurrentProcessId
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
HeapFree
GetModuleFileNameA
GetModuleHandleA
GetVersion
HeapSize
HeapAlloc
GetProcessHeap
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
MultiByteToWideChar
GetWindowsDirectoryA
GetProcessTimes
GetCurrentProcess
GetSystemDirectoryA
GetSystemInfo
lstrcpyA
lstrlenA
GetVersionExA
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
GetThreadTimes
GetCurrentThread
QueryPerformanceCounter
GetTickCount
Sleep
SetLastError
GetFullPathNameA
LocalFree
FormatMessageA
GetEnvironmentVariableA
InterlockedExchange
lstrcpynA
lstrcmpiA
QueryPerformanceFrequency
lstrcmpA
CloseHandle
CreateFileA
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
SleepEx
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ