?GetPluginName@@YAQBDXZ
CreateObject
GetPluginName
GetPluginVersion
Static task
static1
Behavioral task
behavioral1
Sample
9590a215e44094c9c2505be477bb8bdb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9590a215e44094c9c2505be477bb8bdb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
9590a215e44094c9c2505be477bb8bdb_JaffaCakes118
Size
32KB
MD5
9590a215e44094c9c2505be477bb8bdb
SHA1
3fc6b236e977fe819ea0e536f87d8e51a94753cd
SHA256
d861f899c9d679bb5f29bd7b93309a1fc0cd9c6a7b9e0740675ea9756cf78480
SHA512
57cadffddd418b9980c6ec57d42a81132d4bfdefe1696b14866be9cc2a7edd8f12f29d275c29546e38623d4618cdc18dfc6b94ae59e1fcbb63e6757dd1e0a655
SSDEEP
384:7PCrJylfJRou8M6unuyyAlrsrIIKDwJf+a8BqoMOYNit7f:7PCrJylfZyAlLIKEJsq5OYNO7
Checks for missing Authenticode signature.
resource |
---|
9590a215e44094c9c2505be477bb8bdb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
_stricmp
malloc
free
atoi
??2@YAPAXI@Z
??3@YAXPAX@Z
strftime
time
strchr
_initterm
strncpy
_splitpath
sprintf
localtime
GetModuleFileNameA
InterlockedDecrement
LeaveCriticalSection
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
WriteFile
CloseHandle
GetVersionExA
SetErrorMode
CreateFileA
EnterCriticalSection
GetTickCount
PostQuitMessage
GetActiveWindow
MessageBoxA
PeekMessageA
DispatchMessageA
GetClassNameA
IsDialogMessageA
wsprintfA
TranslateMessage
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
closesocket
WSAGetLastError
gethostbyname
inet_addr
htons
WSAStartup
ioctlsocket
inet_ntoa
socket
bind
WSACleanup
connect
select
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
?GetPluginName@@YAQBDXZ
CreateObject
GetPluginName
GetPluginVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE