DllGetClassObject
EventStartup
Static task
static1
Behavioral task
behavioral1
Sample
0f4abe959ab409ecae2bfbfd1dd4a928_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f4abe959ab409ecae2bfbfd1dd4a928_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0f4abe959ab409ecae2bfbfd1dd4a928_JaffaCakes118
Size
124KB
MD5
0f4abe959ab409ecae2bfbfd1dd4a928
SHA1
9ca7f204cea87c4570742883eefaf49c2e40e39f
SHA256
d3bcf44fa2ac58e06be8e6f03e6ae0b93ceda3c798bb62211687afc28d75de37
SHA512
00a3882368ea51a8d913be1b22e09fda88c7eac0a4ecc6ef170214be53d2758b6bf3f0d2b9e14b3153488a2b20736a580dd57f3d0ba896d99989963f9021b261
SSDEEP
3072:oCWg/lm5efQL5aC0WJKLaZTBfCnya6heGB:YgtueY9sLmZTBqya8eGB
Checks for missing Authenticode signature.
resource |
---|
0f4abe959ab409ecae2bfbfd1dd4a928_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_stricmp
_ui64toa
_snprintf
_strnicmp
strlen
strstr
memcmp
atoi
_itoa
memcpy
_ultoa
tolower
memset
_chkstk
_allmul
_alldiv
strtok
WSAWaitForMultipleEvents
shutdown
listen
bind
WSAGetOverlappedResult
WSACreateEvent
WSAIoctl
closesocket
WSAStartup
WSAGetLastError
WSASend
WSARecv
WSASetLastError
getsockname
ntohs
ntohl
setsockopt
WSASocketW
InternetOpenUrlA
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
HttpSendRequestA
InternetSetOptionA
InternetReadFile
HttpOpenRequestA
HttpAddRequestHeadersA
InternetConnectA
SysFreeString
SysAllocString
lstrlenA
GetVolumeInformationA
GetWindowsDirectoryA
GetFileTime
HeapFree
SetNamedPipeHandleState
WaitNamedPipeA
HeapAlloc
TransactNamedPipe
HeapCreate
HeapDestroy
GetVersionExA
HeapSetInformation
FreeLibrary
LoadLibraryA
OpenFileMappingA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
ExitProcess
GetFileAttributesA
GetFileAttributesExA
TlsGetValue
CreateEventA
TlsSetValue
TlsAlloc
VirtualFreeEx
OpenProcess
CreateRemoteThread
Process32First
WriteProcessMemory
ProcessIdToSessionId
Process32Next
VirtualAllocEx
CreateProcessA
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
Thread32First
Thread32Next
GetProcAddress
OpenThread
InterlockedIncrement
GetModuleHandleA
InterlockedDecrement
CreateToolhelp32Snapshot
GetLocalTime
SetUnhandledExceptionFilter
OpenMutexA
CreateThread
SystemTimeToFileTime
Sleep
lstrcpyA
GetExitCodeThread
GetCurrentProcess
OpenEventA
LeaveCriticalSection
WaitForSingleObject
ReadFile
InterlockedCompareExchange
GetModuleFileNameW
WaitForMultipleObjects
SetEvent
GetModuleFileNameA
lstrcatA
GetCurrentThread
VirtualFree
FlushFileBuffers
CreateMutexA
GetLastError
WriteFile
OutputDebugStringA
CreateFileA
DuplicateHandle
GetFileSize
lstrcmpiA
EnterCriticalSection
ReleaseMutex
InitializeCriticalSection
DeleteFileA
GetFileInformationByHandle
TerminateThread
ResetEvent
GetSystemTime
CreateNamedPipeA
PeekNamedPipe
ConnectNamedPipe
DisconnectNamedPipe
GetTempPathA
SetEndOfFile
GetTempFileNameA
lstrcmpA
DeleteCriticalSection
SetFilePointer
VirtualAlloc
VirtualProtect
GetThreadContext
SuspendThread
SetThreadContext
ResumeThread
VirtualQuery
FlushInstructionCache
SetLastError
lstrcmpW
MultiByteToWideChar
GetTickCount
wsprintfA
WaitForInputIdle
ShowWindow
SetForegroundWindow
PeekMessageA
DispatchMessageA
MsgWaitForMultipleObjects
GetSystemMetrics
RegDeleteKeyA
OpenSCManagerA
CloseServiceHandle
OpenServiceA
RegCreateKeyExA
ChangeServiceConfigA
RegOpenKeyExA
ControlService
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
ShellExecuteA
CoUninitialize
CoInitializeEx
CoCreateInstance
DllGetClassObject
EventStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ