CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
79029eaab157ec94c0e9c0c009b8c56c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
79029eaab157ec94c0e9c0c009b8c56c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
79029eaab157ec94c0e9c0c009b8c56c_JaffaCakes118
Size
6.6MB
MD5
79029eaab157ec94c0e9c0c009b8c56c
SHA1
eb4086c6578fc63b3ff2e487cbd2f07b51854760
SHA256
6717a18bbd5f5c6f4e404489a3720bc9012f3e2c5069273a22577ec288813d2c
SHA512
beddeaef1e88629e89253748226feff45fe024c618053a4bb144eb73ac111e63bc51c4b98228400ecaad54bb3be9253ff7eb9fe410fa4aa10bf84fc6f5e6516a
SSDEEP
1536:EBHHkhl56D7a3PGimetsGfzxlUFGRrv2kZ9pZR73S2h1V7mO37tXc0Ammc:EBQj6DO3urC9Si72kd7C2h13cf9c
Checks for missing Authenticode signature.
resource |
---|
79029eaab157ec94c0e9c0c009b8c56c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_vsnprintf
realloc
isdigit
isalpha
tolower
_strupr
_strcmpi
__CxxFrameHandler
atoi
isprint
memcmp
malloc
exit
strrchr
??3@YAXPAX@Z
strcpy
strncpy
wcsstr
wcscpy
wcsncat
strstr
wcslen
time
srand
rand
strcat
free
strchr
memset
memcpy
sprintf
_except_handler3
strlen
mbstowcs
fopen
fseek
ftell
fclose
??2@YAPAXI@Z
wcscmp
_stricmp
_strdup
connect
htons
socket
WSAStartup
send
gethostbyname
recv
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA
DeleteDC
WideCharToMultiByte
GetFileAttributesW
GetTempPathA
DeleteFileA
ReadFile
GetPrivateProfileStringA
Sleep
GetCurrentProcessId
LoadLibraryA
FreeLibrary
GetFileSize
CloseHandle
SetFilePointer
HeapAlloc
GetProcessHeap
GetModuleHandleA
MultiByteToWideChar
lstrlenA
lstrcpynA
UnhookWindowsHookEx
SetWindowsHookExA
GetDC
GetWindowRect
wvsprintfA
GetWindow
GetWindowThreadProcessId
GetWindowTextA
wsprintfA
GetClassNameW
CallNextHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE