COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
a126b21a18e6499ce1e215de405d8779_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a126b21a18e6499ce1e215de405d8779_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a126b21a18e6499ce1e215de405d8779_JaffaCakes118
Size
30KB
MD5
a126b21a18e6499ce1e215de405d8779
SHA1
bcfe3b68eecf4ab818d9c7904c378daff7d1dc64
SHA256
4986dee4c378d37acf72c518abad4773ff5efa26ecef2002a315429b18ea029f
SHA512
59d40d3c409b2b8c7662177abefb340a31ea97125b8c631870cf21a8af4d52412e8d22c8102d5b93913984f2d46d559e32bca3b313657f9711fd1f7911db934a
SSDEEP
384:wl8Xut0uHiE1UEiWQSmvVZxfJaVR9rA84a77crCqiGPjtjvxUawbJFfLtFfNh:IWmiE+EhQbdZyVRwa7rqiGTUh1VL3
Checks for missing Authenticode signature.
resource |
---|
a126b21a18e6499ce1e215de405d8779_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileSize
FreeLibrary
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
Process32Next
Process32First
ReadFile
MoveFileExA
GetTempFileNameA
GetFileAttributesA
TerminateProcess
OpenProcess
SetFileAttributesA
MoveFileA
GetTickCount
CopyFileA
GetCommandLineA
CreateThread
Sleep
GetSystemDirectoryA
MultiByteToWideChar
DeleteFileA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
GetModuleHandleA
GlobalAlloc
VirtualProtect
CreateToolhelp32Snapshot
ExitProcess
GetClassNameA
SetWindowLongA
RegisterShellHookWindow
RegisterWindowMessageA
CallWindowProcA
wsprintfA
GetDesktopWindow
GetDC
GetWindowRect
ReleaseDC
GetParent
GetWindowThreadProcessId
EnumWindows
GetWindowTextA
GetClientRect
CreateDCA
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GdiplusShutdown
GdipDisposeImage
GdipLoadImageFromFile
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipFree
GdipAlloc
GdipCloneImage
GdiplusStartup
GdipSaveImageToFile
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
connect
htons
gethostbyname
socket
recv
inet_ntoa
WSAStartup
send
WSACleanup
inet_addr
closesocket
GetModuleFileNameExA
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
strrchr
_access
strcat
memset
strchr
strncpy
abs
malloc
__dllonexit
_onexit
_initterm
_adjust_fdiv
_getpid
_stricmp
_strlwr
_strrev
free
wcscmp
??2@YAPAXI@Z
memcpy
__CxxFrameHandler
strcmp
strstr
atoi
sprintf
strlen
strcpy
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ