AlphaBlend
DllInitialize
DriverProc
GradientFill
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
TransparentBlt
modMessage
modmCallback
vSetDdrawflag
Static task
static1
Behavioral task
behavioral1
Sample
3808dfe3c6f3a05bb92393cf6667a272_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3808dfe3c6f3a05bb92393cf6667a272_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3808dfe3c6f3a05bb92393cf6667a272_JaffaCakes118
Size
32KB
MD5
3808dfe3c6f3a05bb92393cf6667a272
SHA1
e033919b38ffcd3ff39d4a8a8f2f56b1b2eb7776
SHA256
f5f48529945ba616c16df700fd054f1868976d3166c1953d802f95cae93d4a91
SHA512
c3242873877b6a9c2eac49597036c2ac9a10405b0f495540f4743ccba7c3f3b0ba28af19a1a2c5a75c1e0cbae166a846d70798949776d928a52a1fd37fe18f2e
SSDEEP
768:lDO45fBwQ5nbTTNzj77FbX2ItOA8RH9HX:lj5f5TBT7FbXViRd3
Checks for missing Authenticode signature.
resource |
---|
3808dfe3c6f3a05bb92393cf6667a272_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
MultiByteToWideChar
CreateThread
WaitForSingleObject
ReadFile
GetFileSize
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
GlobalLock
SetFileAttributesA
CreateMutexA
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
GlobalAlloc
Sleep
GetCommandLineA
GetModuleHandleA
LoadLibraryA
GetProcAddress
VirtualProtect
ExitProcess
IsBadReadPtr
GetPrivateProfileStringA
GetSystemDirectoryA
WritePrivateProfileStringA
GetWindowTextA
GetParent
GetWindowThreadProcessId
wsprintfA
EnumWindows
ReleaseDC
GetWindowRect
GetDC
GetDesktopWindow
GetClientRect
CallWindowProcA
GetClassNameA
SetWindowLongA
RegisterShellHookWindow
RegisterWindowMessageA
CreateDCA
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GdipCloneImage
GdipAlloc
GdipFree
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipSaveImageToFile
GdiplusShutdown
GdipLoadImageFromFile
GdipDisposeImage
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
inet_ntoa
send
recv
socket
inet_addr
htons
connect
closesocket
gethostbyname
WSACleanup
WSAStartup
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA
_access
strrchr
strcat
memset
strchr
strncpy
free
_onexit
_initterm
_adjust_fdiv
_getpid
_stricmp
_strlwr
_strrev
__dllonexit
abs
malloc
wcscmp
??2@YAPAXI@Z
__CxxFrameHandler
memcpy
atoi
strcmp
strstr
strcpy
strlen
sprintf
Netbios
AlphaBlend
DllInitialize
DriverProc
GradientFill
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
TransparentBlt
modMessage
modmCallback
vSetDdrawflag
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ