CanReload
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TBStudioReg
Static task
static1
Behavioral task
behavioral1
Sample
88fb6cc6320111671a73d9ff298b1812_JaffaCakes118.dll
Resource
win7-20240705-en
Target
88fb6cc6320111671a73d9ff298b1812_JaffaCakes118
Size
532KB
MD5
88fb6cc6320111671a73d9ff298b1812
SHA1
2990f9deb21aa9ff04147de617665eabe6189859
SHA256
74de5747900fcd8d27b9f140841c46e030b579bebda0bd3a608976a8bf0c0357
SHA512
bf6bc32f69f3e9747bf44c4d472010cbf57b52cb149abc410819bf47516e9d887169c37b76c95d18f2a0f09cd831452ddf255b31fc722bc245497f65d12d902b
SSDEEP
6144:EGwZz6S1j4MG17onV7vxiBU7Uan5Fsje9Vg80rH8NzGRFemgtnmWwWB3mnahNeBu:uLG17kxqi9Vg8I5TemkVV3ju2JPz
Checks for missing Authenticode signature.
resource |
---|
88fb6cc6320111671a73d9ff298b1812_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PlaySoundA
PathFileExistsA
InternetConnectA
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
FindCloseUrlCache
DeleteUrlCacheEntry
InternetCrackUrlA
InternetOpenA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetQueryOptionA
InternetSetOptionA
HttpQueryInfoA
InternetReadFile
SetupIterateCabinetA
RemoveDirectoryA
GetVersionExA
DeleteFileA
CloseHandle
WriteFile
CreateFileA
GetTempPathA
MoveFileExA
Sleep
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameA
GetLastError
SetEvent
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
FreeLibrary
FindClose
FindNextFileA
GetProcAddress
FindFirstFileA
lstrcpyA
lstrcatA
SetLastError
LoadLibraryA
OutputDebugStringA
LoadLibraryW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
TerminateThread
GetCurrentThreadId
GetVersion
DebugBreak
GetTickCount
GlobalUnlock
GlobalLock
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
CopyFileA
MoveFileA
GetTempFileNameA
WaitForSingleObject
ResetEvent
CreateEventA
LeaveCriticalSection
EnterCriticalSection
GlobalAlloc
FlushInstructionCache
GetCurrentProcess
GetCurrentProcessId
lstrcmpA
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThread
HeapFree
HeapAlloc
GetProcessHeap
SetCurrentDirectoryA
DisableThreadLibraryCalls
GetShortPathNameA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
InterlockedExchange
LocalAlloc
RaiseException
LocalFree
GetClassInfoExA
DefWindowProcA
GetWindowTextA
LoadCursorA
GetWindowTextLengthA
RegisterClassExA
CloseClipboard
RedrawWindow
GetDC
OffsetRect
GetMenuItemInfoA
CopyRect
GetWindow
ShowWindow
IsWindowVisible
GetAsyncKeyState
GetWindowRect
CharUpperA
LoadMenuA
InsertMenuA
DestroyMenu
PeekMessageA
DispatchMessageA
LoadImageA
MapWindowPoints
LoadStringA
GetMessagePos
GetCursorPos
GetFocus
wvsprintfA
GetWindowLongA
SetWindowLongA
SetWindowPos
WindowFromPoint
SetCursor
ScreenToClient
RegisterWindowMessageA
GetKeyState
GetClassNameA
InvalidateRect
KillTimer
SetWindowsHookExA
TrackPopupMenu
SetTimer
CharNextA
MessageBoxA
UnhookWindowsHookEx
GetSystemMetrics
SetWindowTextA
GetClientRect
CharLowerA
GetSubMenu
CallNextHookEx
GetSysColor
FillRect
SendMessageA
wsprintfA
IsWindow
GetParent
GetClipboardData
OpenClipboard
PtInRect
DrawEdge
DestroyWindow
CreatePopupMenu
AppendMenuA
CheckMenuItem
EnableMenuItem
CallWindowProcA
SetFocus
IsChild
EndPaint
BeginPaint
ReleaseDC
GetDesktopWindow
CreateAcceleratorTableA
DestroyCursor
PostMessageA
EmptyClipboard
LoadCursorFromFileA
TranslateMessage
SetActiveWindow
MoveWindow
GetActiveWindow
CreateWindowExA
GetDlgItem
InvalidateRgn
SetCapture
DestroyAcceleratorTable
EndMenu
SetWindowRgn
ReleaseCapture
UnregisterClassA
DeleteObject
SelectObject
GetDeviceCaps
GetTextExtentPoint32A
CreateBrushIndirect
GetTextMetricsA
SetBkColor
SetBkMode
SetTextColor
CreateFontA
CreateRectRgn
GetObjectA
CreateSolidBrush
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
GetTextExtentPointA
ExtTextOutA
SHAddToRecentDocs
DragQueryFileA
ShellExecuteA
OleUninitialize
OleRun
CoTaskMemRealloc
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleInitialize
CreateStreamOnHGlobal
RegisterDragDrop
CoUninitialize
ReleaseStgMedium
CoInitialize
CoCreateInstance
CoCreateGuid
SafeArrayAccessData
GetErrorInfo
SafeArrayCreateVector
OleCreateFontIndirect
LoadRegTypeLi
RegisterTypeLi
SafeArrayUnaccessData
SafeArrayPutElement
DispCallFunc
VarUI4FromStr
SafeArrayCreate
SysAllocStringLen
SysAllocString
SysAllocStringByteLen
SysStringLen
SysFreeString
VariantClear
VariantInit
SysStringByteLen
VariantChangeType
LoadTypeLi
VariantCopy
SafeArrayDestroy
UuidFromStringA
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
rand
strcmp
_mkdir
_chdir
wcscpy
wcscmp
strtod
wcsstr
realloc
wcstol
wcstod
_strlwr
fread
ftell
srand
wcsncpy
_fullpath
isdigit
wcslen
_itoa
_except_handler3
atoi
time
localtime
mktime
fseek
difftime
_purecall
_beginthread
free
memcpy
_CxxThrowException
wcschr
strstr
_adjust_fdiv
fgets
fclose
strcat
strcpy
strrchr
??2@YAPAXI@Z
strlen
memcmp
memmove
__CxxFrameHandler
memset
fwrite
_onexit
fopen
strtok
__dllonexit
sprintf
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_wcsicmp
malloc
_initterm
CanReload
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TBStudioReg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ