DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4a1b58d1646503240d2a7722a992cc93_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a1b58d1646503240d2a7722a992cc93_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a1b58d1646503240d2a7722a992cc93_JaffaCakes118
Size
88KB
MD5
4a1b58d1646503240d2a7722a992cc93
SHA1
3d80a55c8759dcdc744cf13dff3afad6494fd6c2
SHA256
7743f3b1a0c4ec1b30576c3e21bd8564833e30b48fb446cf89acc7db9255a45f
SHA512
1ae0eac129dc4533f8f999a0057fbfd4bf5597e07e73f0312e9e848337a5cffec12c97d8ea44e138950f6d855d70a5bf748eb8bc791a7ae1c91f8ab72e215d9b
SSDEEP
1536:1YLxDBZp5Bk47t6rc2sRKMvqvdZ6cYcosF5SNPJm:qXZp5aCB2gEdZEcosF5SNPI
Checks for missing Authenticode signature.
resource |
---|
4a1b58d1646503240d2a7722a992cc93_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
MultiByteToWideChar
Sleep
CopyFileA
DeleteFileA
WinExec
lstrcmpA
CreateDirectoryA
GetEnvironmentVariableA
GetTempFileNameA
WideCharToMultiByte
CreateThread
SetEvent
FreeLibrary
GetProcAddress
LoadLibraryA
LocalFree
GetThreadLocale
GetStringTypeExA
OutputDebugStringA
DebugBreak
InterlockedIncrement
OpenMutexA
CreateMutexA
InterlockedDecrement
HeapCreate
GetVersionExA
GetSystemInfo
HeapAlloc
DisableThreadLibraryCalls
ReadFile
SetFilePointer
WriteFile
CreateFileA
GetFileSize
lstrlenA
GetSystemDirectoryA
CloseHandle
SetTimer
SendMessageA
KillTimer
LoadStringA
BringWindowToTop
SetFocus
SetForegroundWindow
SetActiveWindow
wvsprintfA
SetWindowPos
ShowWindow
SetWindowLongA
GetWindowLongA
CharNextA
CharLowerA
GetDC
ReleaseDC
DestroyWindow
GetDeviceCaps
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
CoInitialize
CoCreateInstance
CoUninitialize
SysAllocStringLen
SysFreeString
VariantClear
SysAllocString
InternetReadFile
InternetOpenUrlA
HttpQueryInfoA
InternetOpenA
InternetCloseHandle
Netbios
URLDownloadToFileA
ord21
ord16
ord15
ord18
ord57
ord30
??_7out_of_range@std@@6B@
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0logic_error@std@@QAE@ABV01@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
atol
time
strcpy
wcslen
strcmp
_strnicmp
_except_handler3
memcpy
strcat
memset
??2@YAPAXI@Z
strlen
sprintf
_CxxThrowException
memcmp
atoi
memmove
strstr
fclose
fgets
??0exception@@QAE@ABV0@@Z
rand
srand
strtok
free
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
_stricmp
fopen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ