DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
06ec5e51616886fd868291fce1776c60_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
06ec5e51616886fd868291fce1776c60_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
06ec5e51616886fd868291fce1776c60_JaffaCakes118
Size
144KB
MD5
06ec5e51616886fd868291fce1776c60
SHA1
d3b9057ff267c6ae830be49460a0651d64150b60
SHA256
b0567347d46f537a6637bf27cb1ea5d9d4a01d8a770101fd3b09211b9abf24b2
SHA512
19b5d91b02b2457eff61173cece7fe4327814d2c2cdc49e264b4bce5fbb160786c47086bff7a9b517b7adb2b34d8608a33272c6769382dbc2a92683fb3641ae1
SSDEEP
3072:wmjb5XVa+S9SU7XirRJUCWozriA6J0JWdivrntM0:Rb5FhS8kXyQCRqAPJeivrntM0
Checks for missing Authenticode signature.
resource |
---|
06ec5e51616886fd868291fce1776c60_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
timeGetTime
UuidToStringA
SHSetValueA
StrStrIA
SHGetValueA
SetWindowPos
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
KillTimer
SetTimer
DefWindowProcA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
OpenClipboard
CloseClipboard
wsprintfA
SystemParametersInfoA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExW
RegQueryValueExW
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
RegOpenKeyExA
RegCloseKey
CryptAcquireContextA
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateGuid
CoCreateInstance
Netbios
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetErrorInfo
SysAllocString
SysFreeString
VariantClear
InternetSetOptionA
HttpQueryInfoA
InternetOpenA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
??3@YAXPAX@Z
__CxxFrameHandler
toupper
strtok
??2@YAPAXI@Z
??0exception@@QAE@ABV0@@Z
isgraph
isxdigit
_CxxThrowException
??1exception@@UAE@XZ
??0exception@@QAE@XZ
wctomb
malloc
__mb_cur_max
printf
strchr
strncpy
?what@exception@@UBEPBDXZ
wcslen
_stricmp
tolower
isspace
islower
strerror
isupper
ispunct
fclose
fwrite
fopen
tmpnam
atoi
free
strstr
isalnum
isalpha
srand
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
wcscmp
GetCurrentProcess
GetProcessTimes
lstrcmpA
lstrcmpiA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsA
VirtualAllocEx
WriteProcessMemory
GetThreadTimes
GetLocalTime
lstrcpynA
GetWindowsDirectoryA
GetSystemDirectoryA
InterlockedExchange
Sleep
GetCurrentDirectoryA
GetEnvironmentVariableA
GetProcessHeap
HeapAlloc
GetCurrentThread
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetSystemInfo
CreateRemoteThread
GetCurrentProcessId
HeapSize
GetVersion
GetFullPathNameA
SetLastError
FormatMessageA
LocalFree
LoadLibraryA
GetLastError
GetProcAddress
FreeLibrary
HeapFree
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
QueryPerformanceCounter
lstrlenA
lstrcpyA
CreateFileA
SleepEx
OpenProcess
CloseHandle
GetTickCount
QueryPerformanceFrequency
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ