DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2810cad14dc8dcc93882b7cb8377facf_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2810cad14dc8dcc93882b7cb8377facf_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2810cad14dc8dcc93882b7cb8377facf_JaffaCakes118
Size
124KB
MD5
2810cad14dc8dcc93882b7cb8377facf
SHA1
af32cfe476a701ee32f2d61a7743cf44cc29bc38
SHA256
994e70905bb504d4ab9126c98fbe4551ba81b6fed28ab132eb812b51ab98fdcd
SHA512
eabf091bb1ac0a9fff435636abfda64ab7bee50c33652bbe67008ff054af9fd527a5646d0459f40caf7495e77c2d9a3a6ffac645c2cfaca90acebffff943f074
SSDEEP
3072:hr3U7U3K+RD5XzHGMMuuHJ4/IwoSKulKlL:hrEA6+R977ui/ESKulmL
Checks for missing Authenticode signature.
resource |
---|
2810cad14dc8dcc93882b7cb8377facf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
GetFileVersionInfoSizeA
GetFileVersionInfoA
SHSetValueA
SHGetValueA
StrStrIA
UuidToStringA
GetErrorInfo
VariantClear
SysAllocString
SysFreeString
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
SystemParametersInfoA
SetWindowPos
KillTimer
SetTimer
wsprintfA
EnumWindows
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
OpenClipboard
CloseClipboard
GetWindowThreadProcessId
RegisterClassExA
GetClassNameA
DefWindowProcA
EnumChildWindows
timeGetTime
HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetReadFile
InternetOpenA
InternetSetOptionA
Netbios
isxdigit
ispunct
wctomb
malloc
__mb_cur_max
??3@YAXPAX@Z
isgraph
strerror
printf
__CxxFrameHandler
_CxxThrowException
strchr
??0exception@@QAE@XZ
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
wcslen
wcscmp
isupper
free
srand
fclose
fwrite
fopen
tmpnam
atoi
toupper
strtok
strstr
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
tolower
isalnum
isalpha
strncpy
islower
isspace
??0exception@@QAE@ABV0@@Z
??2@YAPAXI@Z
_stricmp
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoCreateGuid
GetCurrentProcessId
CreateFileA
DeleteFileA
CreateProcessA
WaitForSingleObject
MoveFileExA
DisableThreadLibraryCalls
OpenProcess
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
GetLocalTime
SleepEx
lstrcmpA
lstrcmpiA
lstrcpynA
InterlockedExchange
GetEnvironmentVariableA
GetVersion
HeapAlloc
HeapSize
FormatMessageA
LocalFree
GetFullPathNameA
SetLastError
GetWindowsDirectoryA
Sleep
lstrlenA
lstrcpyA
GetProcessHeap
LoadLibraryA
GetLastError
GetProcAddress
FreeLibrary
GetCurrentDirectoryA
MultiByteToWideChar
GetModuleHandleA
GetModuleFileNameA
GetCurrentProcess
GetProcessTimes
GetSystemDirectoryA
GetSystemInfo
GetCurrentThread
QueryPerformanceFrequency
GetTickCount
GetVersionExA
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
GetThreadTimes
QueryPerformanceCounter
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ