DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
15b6f920c46a38b231bf05c3046d6d4d_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15b6f920c46a38b231bf05c3046d6d4d_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
15b6f920c46a38b231bf05c3046d6d4d_JaffaCakes118
Size
148KB
MD5
15b6f920c46a38b231bf05c3046d6d4d
SHA1
61afe6026cf236f605b45c8184f2b0cfbacd0084
SHA256
6be02869329930109ebddc492aa06265862a208b5202f028ce5feefdf0b42524
SHA512
a21569e422e101cde45e256443a4794593ddbc056d8a51d9246fd7bc65396707a2cc64964741067d78eadf40a2d82f80ff78fe73a800793774c298e638983854
SSDEEP
3072:CcDyY0/Hk703Lheu3ZvXcFaUdeOJSXFjVK7W4l:CE0saLCaUdeBXFBK1
Checks for missing Authenticode signature.
resource |
---|
15b6f920c46a38b231bf05c3046d6d4d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetClassNameA
DefWindowProcA
SetTimer
KillTimer
SetWindowPos
EnumChildWindows
EnumWindows
wsprintfA
CloseClipboard
OpenClipboard
GetWindowThreadProcessId
SystemParametersInfoA
DispatchMessageA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
timeGetTime
SHSetValueA
SHGetValueA
StrStrIA
RegQueryValueExW
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
RegOpenKeyExA
RegCloseKey
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExW
Netbios
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
CoCreateInstance
CoInitialize
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
UuidToStringA
GetErrorInfo
SysAllocString
SysFreeString
VariantClear
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
??0exception@@QAE@XZ
__CxxFrameHandler
??3@YAXPAX@Z
??1exception@@UAE@XZ
strerror
strncpy
?what@exception@@UBEPBDXZ
wcslen
wcscmp
isupper
isalnum
strchr
malloc
free
fclose
fwrite
fopen
tmpnam
atoi
strtol
_stricmp
__mb_cur_max
isspace
strstr
tolower
islower
isxdigit
ispunct
printf
isgraph
toupper
strtok
srand
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
??2@YAPAXI@Z
_CxxThrowException
isalpha
??0exception@@QAE@ABV0@@Z
wctomb
GetFileVersionInfoSizeA
GetFileVersionInfoA
InterlockedExchange
GetEnvironmentVariableA
GetVersionExA
GetCurrentProcessId
GetEnvironmentStrings
FreeEnvironmentStringsA
GetWindowsDirectoryA
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
MultiByteToWideChar
GetCurrentThread
GetThreadTimes
GetSystemInfo
lstrcpyA
lstrcmpiA
lstrcmpA
GetProcessTimes
GetCurrentProcess
CreateFileA
GetCurrentDirectoryA
LocalFree
SleepEx
GetLocalTime
GetSystemDirectoryA
DeleteFileA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateProcessA
WaitForSingleObject
MoveFileExA
OpenProcess
CloseHandle
SetLastError
GetFullPathNameA
lstrcpynA
GetVersion
HeapAlloc
HeapSize
lstrlenA
GetProcessHeap
FormatMessageA
QueryPerformanceCounter
GetModuleHandleA
GetModuleFileNameA
HeapFree
QueryPerformanceFrequency
GetTickCount
GetLastError
Sleep
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ