DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7702b847ec1001b0b01c9138b041a313_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7702b847ec1001b0b01c9138b041a313_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
7702b847ec1001b0b01c9138b041a313_JaffaCakes118
Size
144KB
MD5
7702b847ec1001b0b01c9138b041a313
SHA1
4e7ae06200f942418137adec052914e855344318
SHA256
6f98cae78666b8546ef3c8c23af7f84d1f54efa40e3f7947b03779b06f9440c9
SHA512
c0c65817cbd47a039bba070096f2348112fefdd96f7167cc7e4dbe195b62905ea1c8aeaf489822380e2b4f45290281c5c706ad00ab04f29924936025f1397187
SSDEEP
1536:FmNCk+oH1XA17zq4EgQ6xRvvtB8WTBAau3hzEFtiTICS4AFZJydY+vvqLaK9ZXiK:FDohA17et8Rvv4W4h4thNJydY+HtHuJ
Checks for missing Authenticode signature.
resource |
---|
7702b847ec1001b0b01c9138b041a313_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileVersionInfoSizeA
GetFileVersionInfoA
EnumProcesses
GetModuleBaseNameA
EnumProcessModules
_stricmp
toupper
strtok
printf
strstr
islower
wcslen
?what@exception@@UBEPBDXZ
wcscmp
ispunct
tolower
isgraph
wctomb
__mb_cur_max
isxdigit
free
malloc
strncpy
isspace
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
_CxxThrowException
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
srand
atoi
tmpnam
fopen
fwrite
fclose
isupper
strerror
isalnum
isalpha
timeGetTime
Netbios
SysAllocString
GetErrorInfo
VariantClear
SysFreeString
SHSetValueA
SHGetValueA
StrStrIA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
CoCreateInstance
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
OpenClipboard
CloseClipboard
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
wsprintfA
DefWindowProcA
SetWindowPos
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
SetTimer
KillTimer
SystemParametersInfoA
CryptReleaseContext
CryptAcquireContextA
RegCloseKey
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
CryptGenRandom
UuidToStringA
Sleep
GetModuleFileNameA
lstrcpyA
GetEnvironmentStrings
FreeEnvironmentStringsA
LoadLibraryA
VirtualAllocEx
GetProcAddress
WriteProcessMemory
CreateRemoteThread
FreeLibrary
GetWindowsDirectoryA
CreateFileA
FormatMessageA
LocalFree
lstrcmpiA
SetLastError
GetLastError
GetProcessHeap
HeapAlloc
HeapSize
GetVersion
lstrlenA
HeapFree
SleepEx
OpenProcess
CloseHandle
GetLocalTime
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
lstrcmpA
GetSystemDirectoryA
GetThreadTimes
GetCurrentThread
GetCurrentProcessId
GetCurrentDirectoryA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
GetFullPathNameA
GetSystemInfo
GetCurrentProcess
MultiByteToWideChar
GetProcessTimes
lstrcpynA
InterlockedExchange
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ