COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
4691879190973767d0e5784c0c98a91f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4691879190973767d0e5784c0c98a91f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4691879190973767d0e5784c0c98a91f_JaffaCakes118
Size
34KB
MD5
4691879190973767d0e5784c0c98a91f
SHA1
a0503b90d7c12003eebcdcff6f4e94ca9bef146e
SHA256
bab38139bddf73fd8d2a64931768b5f03205aea31553c7c20983a5eece0ebc97
SHA512
414baafb1f2143d044598c6f2f5c7dc6409f71355757df6a711cfbac6bc0c8763a456be47f68dbb348ce27396fb1ec8b60a486292080da8e075456a389cc156d
SSDEEP
768:YlOTjhcY4591BlnONd7hFyDhChw59FR6Cjf:YlOTL45jy7hF4M6XFR6Cj
Checks for missing Authenticode signature.
resource |
---|
4691879190973767d0e5784c0c98a91f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileSize
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
CreateToolhelp32Snapshot
ReadFile
TerminateProcess
OpenProcess
SetFileAttributesA
GetCommandLineA
WaitForSingleObject
GetSystemDirectoryA
MultiByteToWideChar
DeleteFileA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
GetCurrentDirectoryA
GetPrivateProfileStringA
ExitProcess
CreateThread
IsBadReadPtr
Sleep
GetParent
GetWindowThreadProcessId
ReleaseDC
wsprintfA
GetWindowTextA
GetWindowRect
GetDC
GetDesktopWindow
SelectObject
CreateCompatibleBitmap
DeleteObject
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GetDeviceCaps
CreateDCA
CreateCompatibleDC
BitBlt
CryptHashData
CryptGetHashParam
CryptCreateHash
CryptAcquireContextA
GdipCloneImage
GdipAlloc
GdipFree
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipSaveImageToFile
GdiplusShutdown
GdipLoadImageFromFile
GdipDisposeImage
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
inet_ntoa
send
recv
socket
inet_addr
htons
connect
closesocket
gethostbyname
WSACleanup
WSAStartup
_access
strrchr
strchr
atoi
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_getpid
_stricmp
_strlwr
_strrev
malloc
wcscmp
??2@YAPAXI@Z
memcpy
__CxxFrameHandler
strcat
strncmp
strstr
memset
sprintf
strncpy
strcmp
strcpy
strlen
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ