CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
Static task
static1
Behavioral task
behavioral1
Sample
3b2efdf454e81c07f174db7d026e6a05_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b2efdf454e81c07f174db7d026e6a05_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3b2efdf454e81c07f174db7d026e6a05_JaffaCakes118
Size
1.1MB
MD5
3b2efdf454e81c07f174db7d026e6a05
SHA1
894f6a8e285a54b4078b2b08b8e2fb2e332fc7fb
SHA256
7ef023bd40bbbe66d263563a709b03c0b7c10b764355af36af692b1c8b46c262
SHA512
a1703586923bf56a632ac350b53c0c0abd9eacdcc402f65e6f55af43f27018bd75ac3b53b59c64e519b6ce3d110fd8be8a19791708cfb6571921ef29b945accb
SSDEEP
3072:FZogAzbFgAVu9zsN9P54W3xtWMLPHbd8xbO:Xo5zbFQsjP5d3xtWMLP7d8Z
Checks for missing Authenticode signature.
resource |
---|
3b2efdf454e81c07f174db7d026e6a05_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalAlloc
PeekNamedPipe
lstrcatA
InterlockedDecrement
WinExec
CreateMutexA
CreateFileW
SetFilePointer
SetEndOfFile
UnmapViewOfFile
FindClose
FindNextFileW
lstrcmpW
FindFirstFileW
GetFileSize
MapViewOfFile
CreateFileMappingA
GetDiskFreeSpaceExW
GetVolumeInformationW
lstrcpyW
lstrlenW
GetLogicalDriveStringsW
LocalReAlloc
CreateRemoteThread
GetProcAddress
GetModuleHandleA
GetSystemDirectoryA
CreateFileA
LoadLibraryA
MultiByteToWideChar
ReadFile
GetCurrentProcessId
VirtualFreeEx
VirtualAllocEx
lstrcmpiA
CreateToolhelp32Snapshot
FreeLibrary
GetCurrentThread
WideCharToMultiByte
lstrcpyA
GetLastError
SetFileTime
GetFileTime
Process32Next
Process32First
VirtualProtect
GetCurrentThreadId
InterlockedExchange
CreateEventA
ResumeThread
SetEvent
VirtualFree
VirtualAlloc
WritePrivateProfileStringA
GetPrivateProfileStringA
LocalFree
CreatePipe
GetStartupInfoA
CreateProcessA
WaitForSingleObject
TerminateProcess
DisconnectNamedPipe
WriteFile
lstrlenA
InterlockedIncrement
GetDriveTypeW
GetTempPathA
DeleteFileA
CloseHandle
AllocConsole
Sleep
GetTickCount
MoveFileExA
GetCommandLineA
FreeConsole
OpenProcess
CloseDesktop
BlockInput
keybd_event
MapVirtualKeyA
SetCapture
WindowFromPoint
SetCursorPos
mouse_event
GetCursorInfo
ReleaseDC
DestroyCursor
LoadCursorA
GetDesktopWindow
GetDC
CloseWindowStation
CharPrevW
wsprintfA
wsprintfW
CreateDesktopA
SetThreadDesktop
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetThreadDesktop
GetProcessWindowStation
SetRect
GetSystemMetrics
GetCursorPos
CreateCompatibleBitmap
GetDIBits
BitBlt
DeleteDC
DeleteObject
CreateDIBSection
CreateCompatibleDC
SelectObject
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
SHGetFileInfoW
OleRun
CoCreateInstance
CoInitialize
CoUninitialize
VariantClear
SysAllocString
SysFreeString
GetErrorInfo
PathFileExistsW
StrStrIA
PathFileExistsA
StrStrIW
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
?_Xran@std@@YAXXZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
WSACleanup
WSAStartup
htonl
bind
sendto
recv
htons
connect
select
inet_ntoa
inet_addr
gethostname
ioctlsocket
closesocket
socket
gethostbyname
send
srand
rand
_wsplitpath
_beginthreadex
wcslen
atoi
??2@YAPAXI@Z
strrchr
malloc
wcsrchr
_itoa
strncat
strstr
free
wcsncmp
strtol
memmove
sscanf
_CxxThrowException
_wtoi
wcsncpy
wcscpy
time
_purecall
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_wcsicmp
__CxxFrameHandler
MakeSureDirectoryPathExists
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ