CanReload
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TBStudioReg
Static task
static1
Behavioral task
behavioral1
Sample
346bc92ec0c0a58b540f82521586a3f8_JaffaCakes118.dll
Resource
win7-20240705-en
Target
346bc92ec0c0a58b540f82521586a3f8_JaffaCakes118
Size
536KB
MD5
346bc92ec0c0a58b540f82521586a3f8
SHA1
2296c7c1b27ce3f522e14c20fdf9fa1f27202111
SHA256
294a2cc21bba5bd63aadd3ef2bad09652556e13742c03b0991674bb4f66e1c8b
SHA512
f135ce072d62972118d77173178506e3a4f32d4b366f65f86a890326654ae22499ba532438b5ad1c69ad4c8431e88e9c7dfd37037e710a15288a23c6999d5810
SSDEEP
12288:8c+spfKhkcEm6MWdVcw747yKutIxhbrq61Q47yq:8c+shK5WdVcw747Zo6hfq+Q47yq
Checks for missing Authenticode signature.
resource |
---|
346bc92ec0c0a58b540f82521586a3f8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PlaySoundA
PathFileExistsA
InternetConnectA
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
FindCloseUrlCache
DeleteUrlCacheEntry
InternetCrackUrlA
InternetOpenA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetQueryOptionA
InternetSetOptionA
HttpQueryInfoA
InternetReadFile
SetupIterateCabinetA
RemoveDirectoryA
GetVersionExA
DeleteFileA
CloseHandle
WriteFile
CreateFileA
GetTempPathA
MoveFileExA
Sleep
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameA
GetLastError
SetEvent
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
FreeLibrary
FindClose
FindNextFileA
GetProcAddress
FindFirstFileA
lstrcpyA
lstrcatA
SetLastError
LoadLibraryA
OutputDebugStringA
LoadLibraryW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
TerminateThread
GetCurrentThreadId
DebugBreak
GetVersion
GetTickCount
GlobalUnlock
GlobalLock
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
CopyFileA
MoveFileA
GetTempFileNameA
WaitForSingleObject
ResetEvent
CreateEventA
LeaveCriticalSection
EnterCriticalSection
GlobalAlloc
FlushInstructionCache
GetCurrentProcess
GetCurrentProcessId
lstrcmpA
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThread
HeapFree
HeapAlloc
GetProcessHeap
SetCurrentDirectoryA
DisableThreadLibraryCalls
GetShortPathNameA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
InterlockedExchange
LocalAlloc
RaiseException
LocalFree
GetClassInfoExA
DefWindowProcA
GetWindowTextA
LoadCursorA
GetWindowTextLengthA
RegisterClassExA
CloseClipboard
RedrawWindow
GetDC
OffsetRect
GetMenuItemInfoA
CopyRect
GetWindow
ShowWindow
IsWindowVisible
GetAsyncKeyState
GetWindowRect
CharUpperA
LoadMenuA
InsertMenuA
DestroyMenu
PeekMessageA
DispatchMessageA
MapWindowPoints
LoadImageA
GetMessagePos
GetCursorPos
LoadStringA
GetFocus
GetWindowLongA
SetWindowLongA
SetWindowPos
wvsprintfA
WindowFromPoint
SetCursor
ScreenToClient
RegisterWindowMessageA
GetKeyState
GetClassNameA
InvalidateRect
KillTimer
SetWindowsHookExA
TrackPopupMenu
SetTimer
CharNextA
MessageBoxA
UnhookWindowsHookEx
GetSystemMetrics
SetWindowTextA
GetClientRect
CharLowerA
GetSubMenu
CallNextHookEx
GetSysColor
FillRect
SendMessageA
wsprintfA
IsWindow
GetParent
GetClipboardData
OpenClipboard
PtInRect
DrawEdge
DestroyWindow
CreatePopupMenu
AppendMenuA
CheckMenuItem
EnableMenuItem
CallWindowProcA
SetFocus
IsChild
EndPaint
BeginPaint
ReleaseDC
GetDesktopWindow
CreateAcceleratorTableA
DestroyCursor
PostMessageA
EmptyClipboard
LoadCursorFromFileA
TranslateMessage
SetActiveWindow
MoveWindow
GetActiveWindow
CreateWindowExA
GetDlgItem
InvalidateRgn
SetCapture
DestroyAcceleratorTable
EndMenu
SetWindowRgn
ReleaseCapture
UnregisterClassA
DeleteObject
SelectObject
GetDeviceCaps
GetTextExtentPoint32A
CreateBrushIndirect
GetTextMetricsA
SetBkColor
SetBkMode
SetTextColor
CreateFontA
CreateRectRgn
GetObjectA
CreateSolidBrush
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
GetTextExtentPointA
ExtTextOutA
SHAddToRecentDocs
DragQueryFileA
ShellExecuteA
OleUninitialize
OleRun
CoTaskMemRealloc
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleInitialize
CreateStreamOnHGlobal
RegisterDragDrop
CoUninitialize
ReleaseStgMedium
CoInitialize
CoCreateInstance
CoCreateGuid
SafeArrayAccessData
GetErrorInfo
SafeArrayCreateVector
OleCreateFontIndirect
LoadRegTypeLi
RegisterTypeLi
SafeArrayUnaccessData
SafeArrayPutElement
DispCallFunc
VarUI4FromStr
SafeArrayCreate
SysAllocStringLen
SysAllocString
SysAllocStringByteLen
SysStringLen
SysFreeString
VariantClear
VariantInit
SysStringByteLen
VariantChangeType
LoadTypeLi
VariantCopy
SafeArrayDestroy
UuidFromStringA
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
rand
strcmp
_mkdir
_chdir
wcscpy
wcscmp
strtod
wcsstr
realloc
wcstol
wcstod
_strlwr
fread
ftell
srand
wcsncpy
_fullpath
isdigit
wcslen
_itoa
_except_handler3
atoi
time
localtime
mktime
fseek
difftime
_purecall
_beginthread
free
memcpy
_CxxThrowException
wcschr
strstr
_adjust_fdiv
fgets
fclose
strcat
strcpy
strrchr
??2@YAPAXI@Z
strlen
memcmp
memmove
__CxxFrameHandler
memset
fwrite
_onexit
fopen
strtok
__dllonexit
sprintf
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_wcsicmp
malloc
_initterm
CanReload
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TBStudioReg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ