DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
46c71a30dfa0c70975f779594dec5405_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46c71a30dfa0c70975f779594dec5405_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
46c71a30dfa0c70975f779594dec5405_JaffaCakes118
Size
188KB
MD5
46c71a30dfa0c70975f779594dec5405
SHA1
02c54c78c9369a2431c28519d6b095ec3dbcc2da
SHA256
599a1359c9e851ce40fa1e843e3341d7a4bd5b53300cfe9703af9987a542328d
SHA512
ba45e073473da16f41f266e1465fafc4c012cf173c0c8ceedb55e6faf3d0157fba52608cfc8e739c9ebd5047cdbddf5ee2766a427dea6a4e2beec13bd1e61e4e
SSDEEP
3072:kXqxGSigYC8UwzhMt3DF0hqNKzCTcaMgWoxZKJEeS7F+DwOM9enFZ:kX6SgYC8BzhMRDFsqdT9zVeSh+DWQnFZ
Checks for missing Authenticode signature.
resource |
---|
46c71a30dfa0c70975f779594dec5405_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
GetFileVersionInfoSizeA
GetFileVersionInfoA
CoCreateGuid
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
StrStrIA
SHSetValueA
SHGetValueA
Netbios
UuidToStringA
CreateWindowExA
ShowWindow
GetMessageA
RegisterClassExA
DispatchMessageA
KillTimer
SetTimer
DefWindowProcA
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
SystemParametersInfoA
SetWindowPos
wsprintfA
OpenClipboard
CloseClipboard
TranslateMessage
timeGetTime
wcscmp
wcslen
?what@exception@@UBEPBDXZ
free
toupper
strtok
fclose
fwrite
fopen
tmpnam
atoi
strtol
strstr
srand
__dllonexit
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
??0exception@@QAE@XZ
strchr
_CxxThrowException
__CxxFrameHandler
isupper
isspace
isalnum
??3@YAXPAX@Z
??2@YAPAXI@Z
isxdigit
malloc
tolower
printf
islower
ispunct
isgraph
strerror
strncpy
__mb_cur_max
wctomb
??0exception@@QAE@ABV0@@Z
isalpha
_onexit
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
InternetReadFile
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
RegCloseKey
WaitForSingleObject
MoveFileExA
GetCurrentProcessId
CreateFileA
OpenProcess
VirtualAllocEx
GetModuleHandleA
GetModuleFileNameA
WriteProcessMemory
CreateRemoteThread
CloseHandle
SleepEx
lstrcmpA
lstrcmpiA
InterlockedExchange
CreateProcessA
GetEnvironmentVariableA
GetVersion
HeapAlloc
HeapSize
FormatMessageA
LocalFree
GetFullPathNameA
SetLastError
GetLastError
Sleep
GetCurrentThread
GetThreadTimes
GetCurrentDirectoryA
GetWindowsDirectoryA
lstrlenA
DeleteFileA
GetLocalTime
HeapFree
GetProcessTimes
GetCurrentProcess
GetSystemDirectoryA
lstrcpynA
GetProcAddress
LoadLibraryA
GetProcessHeap
GetVersionExA
FreeLibrary
MultiByteToWideChar
GetSystemInfo
lstrcpyA
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
FreeEnvironmentStringsA
GetEnvironmentStrings
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ