DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5dcae816b6d1cc92b620b0f003bb2f40_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5dcae816b6d1cc92b620b0f003bb2f40_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5dcae816b6d1cc92b620b0f003bb2f40_JaffaCakes118
Size
132KB
MD5
5dcae816b6d1cc92b620b0f003bb2f40
SHA1
b4e1f42c75d6a79170b8ccef42142d81d2e48b8c
SHA256
6e7c7acb27a040fe879a1c4bb487035351de8c9e9714bad54e6adb59087051db
SHA512
89594b7c1cdbf804a075422c405642f9bde22963623ddbca78c9c649a4bcd748ed0ade6745a25868d3daa0f90c1edc379e3707ab8daa95cd9bf4a00b2f2e047f
SSDEEP
1536:+EhuXYS7OkFbxcvXhzbXjcUzMrxw+IZCu85xOfpJScOuDjiWICS4AXoMj7JGLa9s:+EhM7OktINbXmx1IdNxDkPj7JJ93GT
Checks for missing Authenticode signature.
resource |
---|
5dcae816b6d1cc92b620b0f003bb2f40_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrStrIA
SHGetValueA
SHSetValueA
SysAllocString
VariantClear
GetErrorInfo
SysFreeString
free
malloc
??3@YAXPAX@Z
fclose
fwrite
fopen
tmpnam
??2@YAPAXI@Z
atoi
strtol
strchr
strncpy
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
isalnum
isxdigit
islower
srand
strstr
isupper
strerror
strtok
toupper
wcscmp
wcslen
?what@exception@@UBEPBDXZ
_stricmp
ispunct
tolower
__mb_cur_max
wctomb
__CxxFrameHandler
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
isspace
isalpha
isgraph
printf
??0exception@@QAE@ABV0@@Z
UuidToStringA
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
CoTaskMemFree
CoInitialize
CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
Netbios
GetFileVersionInfoSizeA
GetFileVersionInfoA
ShowWindow
DefWindowProcA
SetTimer
KillTimer
SetWindowPos
SystemParametersInfoA
DispatchMessageA
TranslateMessage
GetMessageA
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
CloseClipboard
wsprintfA
RegisterClassExA
CreateWindowExA
OpenClipboard
timeGetTime
RegCloseKey
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegOpenKeyExA
InternetReadFile
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
DeleteFileA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateProcessA
WaitForSingleObject
CloseHandle
MoveFileExA
GetLocalTime
GetSystemDirectoryA
QueryPerformanceCounter
QueryPerformanceFrequency
VirtualAllocEx
OpenProcess
SleepEx
GetLastError
GetProcessTimes
GetCurrentProcess
LocalFree
GetWindowsDirectoryA
HeapFree
GetCurrentDirectoryA
GetVersion
Sleep
HeapSize
HeapAlloc
GetProcessHeap
CreateRemoteThread
GetTickCount
FormatMessageA
GetModuleFileNameA
CreateFileA
GetSystemInfo
GetCurrentProcessId
GetModuleHandleA
lstrcpynA
GetFullPathNameA
GetThreadTimes
GetCurrentThread
GetVersionExA
FreeEnvironmentStringsA
GetEnvironmentStrings
lstrcpyA
lstrlenA
MultiByteToWideChar
GetEnvironmentVariableA
SetLastError
InterlockedExchange
lstrcmpiA
lstrcmpA
WriteProcessMemory
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ