DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3efd97798db1227960dd5c23fe6d34b6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3efd97798db1227960dd5c23fe6d34b6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3efd97798db1227960dd5c23fe6d34b6_JaffaCakes118
Size
148KB
MD5
3efd97798db1227960dd5c23fe6d34b6
SHA1
6a23166227318099f5b14fdd6235650850949dda
SHA256
ceac68c88fdc169327f3826a8aae8f345694cf12e99ca093666959fbcfe9f1c6
SHA512
1e43ac08005e709db3e6fd845ccf5b49ee995c4e92ab5fb69ad519e95240f604be0cb443b7b5d30ecb037867bd3fe710bb242dec29cdbc9b20eff33fe7abdbf5
SSDEEP
3072:H1VkvX31SpdGzNJ1reoPOs0BzR+oU6VtJau+F:vkvU7GzNJ4XgGVSx
Checks for missing Authenticode signature.
resource |
---|
3efd97798db1227960dd5c23fe6d34b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HttpQueryInfoA
InternetCloseHandle
InternetReadFile
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
GetErrorInfo
VariantClear
SysAllocString
SysFreeString
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
strtol
atoi
tmpnam
fopen
fwrite
fclose
ispunct
free
srand
isalpha
isgraph
_stricmp
isalnum
strtok
toupper
isupper
strerror
islower
isxdigit
__mb_cur_max
malloc
wctomb
wcscmp
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@XZ
_CxxThrowException
tolower
wcslen
??0exception@@QAE@ABV0@@Z
??2@YAPAXI@Z
??3@YAXPAX@Z
strncpy
strchr
__CxxFrameHandler
printf
isspace
strstr
_adjust_fdiv
EnumChildWindows
EnumWindows
KillTimer
SetTimer
DefWindowProcA
OpenClipboard
CloseClipboard
GetWindowThreadProcessId
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
SystemParametersInfoA
SetWindowPos
wsprintfA
GetClassNameA
RegisterClassExA
SetEntriesInAclA
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityInfo
GetSecurityInfo
RegCloseKey
Netbios
GetFileVersionInfoSizeA
GetFileVersionInfoA
timeGetTime
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
UuidToStringA
SHSetValueA
SHGetValueA
StrStrIA
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoCreateGuid
QueryPerformanceFrequency
GetTickCount
CloseHandle
OpenProcess
SleepEx
GetModuleFileNameA
GetThreadTimes
GetCurrentThread
GetVersionExA
GetProcessTimes
GetCurrentProcess
WriteProcessMemory
HeapFree
GetVersion
GetLastError
SetLastError
lstrlenA
GetFullPathNameA
GetProcessHeap
HeapSize
HeapAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualAllocEx
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetCurrentProcessId
Sleep
LocalFree
FormatMessageA
GetEnvironmentVariableA
GetCurrentDirectoryA
InterlockedExchange
GetSystemDirectoryA
GetWindowsDirectoryA
lstrcpyA
GetModuleHandleA
FreeEnvironmentStringsA
GetEnvironmentStrings
lstrcpynA
QueryPerformanceCounter
lstrcmpiA
CreateRemoteThread
GetLocalTime
GetSystemInfo
MultiByteToWideChar
CreateFileA
lstrcmpA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ