CanReload
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TBStudioReg
Static task
static1
Behavioral task
behavioral1
Sample
602a29a53a2646bbb31fae2a9e9000b5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
602a29a53a2646bbb31fae2a9e9000b5_JaffaCakes118
Size
532KB
MD5
602a29a53a2646bbb31fae2a9e9000b5
SHA1
4a760ed6474921cac0b0a083803a4c9f19e49594
SHA256
96f81d1af49740a6df3a4adc63b66a6f317e9ca6a3c8264e535ec1ecdbb86de6
SHA512
16f59a324c27d560985b6616b7343a74add1c8055cdd3e4c9ff5802ba516e0cb8f9c7c212ba3c17672192884b13a1d0f1230192a20e5312ec7d8c02bf4019d64
SSDEEP
12288:OWYWJryfs7JYmvNh3pHtdj7zLKTkWndibB:oIynmdHtlLKTkqQbB
Checks for missing Authenticode signature.
resource |
---|
602a29a53a2646bbb31fae2a9e9000b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PlaySoundA
PathFileExistsA
InternetConnectA
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
FindCloseUrlCache
DeleteUrlCacheEntry
InternetCrackUrlA
InternetOpenA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetQueryOptionA
InternetSetOptionA
HttpQueryInfoA
InternetReadFile
SetupIterateCabinetA
RemoveDirectoryA
GetVersionExA
DeleteFileA
CloseHandle
WriteFile
CreateFileA
GetTempPathA
MoveFileExA
Sleep
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameA
GetLastError
SetEvent
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
FreeLibrary
FindClose
FindNextFileA
GetProcAddress
FindFirstFileA
lstrcpyA
lstrcatA
SetLastError
LoadLibraryA
OutputDebugStringA
LoadLibraryW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
TerminateThread
GetCurrentThreadId
GetVersion
DebugBreak
GlobalUnlock
GlobalLock
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
CopyFileA
MoveFileA
GetTempFileNameA
WaitForSingleObject
ResetEvent
CreateEventA
LeaveCriticalSection
EnterCriticalSection
GlobalAlloc
FlushInstructionCache
GetCurrentProcess
GetCurrentProcessId
lstrcmpA
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThread
HeapFree
HeapAlloc
GetProcessHeap
SetCurrentDirectoryA
DisableThreadLibraryCalls
GetShortPathNameA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
InterlockedExchange
LocalAlloc
RaiseException
LocalFree
GetWindowTextA
GetWindowTextLengthA
RegisterClassExA
CloseClipboard
CreateAcceleratorTableA
DefWindowProcA
GetClipboardData
SetWindowRgn
ReleaseDC
GetDC
OffsetRect
GetMenuItemInfoA
CopyRect
GetWindow
ShowWindow
IsWindowVisible
GetAsyncKeyState
GetWindowRect
CharUpperA
LoadMenuA
InsertMenuA
DestroyMenu
LoadImageA
MapWindowPoints
LoadStringA
GetMessagePos
GetCursorPos
GetFocus
wvsprintfA
GetWindowLongA
SetWindowLongA
SetWindowPos
WindowFromPoint
SetCursor
ScreenToClient
PtInRect
GetClassInfoExA
GetClassNameA
InvalidateRect
KillTimer
SetWindowsHookExA
TrackPopupMenu
SetTimer
CharNextA
MessageBoxA
UnhookWindowsHookEx
GetSystemMetrics
SetWindowTextA
GetClientRect
CharLowerA
GetSubMenu
CallNextHookEx
GetSysColor
FillRect
SendMessageA
wsprintfA
IsWindow
GetParent
OpenClipboard
DrawEdge
GetKeyState
DestroyWindow
CreatePopupMenu
AppendMenuA
CheckMenuItem
EnableMenuItem
CallWindowProcA
SetFocus
IsChild
EndPaint
BeginPaint
RedrawWindow
GetDesktopWindow
DestroyAcceleratorTable
ReleaseCapture
DestroyCursor
PostMessageA
EmptyClipboard
EndMenu
UnregisterClassA
TranslateMessage
DispatchMessageA
SetActiveWindow
MoveWindow
GetActiveWindow
CreateWindowExA
GetDlgItem
RegisterWindowMessageA
SetCapture
LoadCursorA
InvalidateRgn
LoadCursorFromFileA
SelectObject
CreateBrushIndirect
GetDeviceCaps
GetTextExtentPoint32A
DeleteObject
GetTextMetricsA
SetBkColor
SetBkMode
SetTextColor
CreateFontA
CreateRectRgn
GetObjectA
CreateSolidBrush
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
GetTextExtentPointA
ExtTextOutA
SHAddToRecentDocs
DragQueryFileA
ShellExecuteA
OleUninitialize
OleRun
CoTaskMemRealloc
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleInitialize
CreateStreamOnHGlobal
RegisterDragDrop
CoUninitialize
ReleaseStgMedium
CoInitialize
CoCreateInstance
CoCreateGuid
RegisterTypeLi
GetErrorInfo
VarUI4FromStr
SafeArrayCreateVector
LoadRegTypeLi
OleCreateFontIndirect
SafeArrayAccessData
SafeArrayUnaccessData
DispCallFunc
VariantInit
SysAllocStringLen
SysAllocString
SysAllocStringByteLen
SysStringLen
SysFreeString
VariantClear
SafeArrayPutElement
SafeArrayCreate
SysStringByteLen
VariantChangeType
LoadTypeLi
VariantCopy
SafeArrayDestroy
UuidFromStringA
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
rand
strcmp
_mkdir
_chdir
wcscpy
wcscmp
strtod
wcsstr
realloc
wcstol
wcstod
_strlwr
fread
ftell
srand
wcsncpy
isdigit
_fullpath
wcslen
_itoa
_except_handler3
atoi
time
localtime
mktime
fseek
difftime
_beginthread
free
memcpy
_CxxThrowException
strstr
wcschr
_adjust_fdiv
fopen
fgets
fclose
strcat
strcpy
strrchr
??2@YAPAXI@Z
strlen
memcmp
memmove
__CxxFrameHandler
memset
malloc
__dllonexit
strtok
_purecall
fwrite
_wcsicmp
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_initterm
sprintf
CanReload
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TBStudioReg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ