DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a779fc6fe28c10e05604d32c2c83a9d2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a779fc6fe28c10e05604d32c2c83a9d2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a779fc6fe28c10e05604d32c2c83a9d2_JaffaCakes118
Size
128KB
MD5
a779fc6fe28c10e05604d32c2c83a9d2
SHA1
409567b408788626477aebd727f677f15aa2385e
SHA256
11a45fb641bf903effa8c7bcec0707c38511a2bd2f2fa9378f18553e42841ebb
SHA512
424915a1e169a6e6b26f2599c5d677681228066525f3dfcbb9b1be87ad93250dfdc6ca1593bba98fd3ffa90d37b7375fb2e07df044e337d8ad834664c44d134e
SSDEEP
3072:b2Pj/HFd/2tGKYgL9ANL6Y9zKJaWQdxH:KPzxQ9sf9z9WQdxH
Checks for missing Authenticode signature.
resource |
---|
a779fc6fe28c10e05604d32c2c83a9d2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
CoInitialize
VariantClear
SysAllocString
SysFreeString
GetErrorInfo
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
CryptAcquireContextA
srand
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
atoi
tmpnam
fopen
fwrite
fclose
strtok
toupper
isalpha
isspace
isalnum
strstr
strerror
free
isgraph
isupper
tolower
isxdigit
printf
__mb_cur_max
malloc
wctomb
strncpy
strchr
wcscmp
?what@exception@@UBEPBDXZ
??2@YAPAXI@Z
??1exception@@UAE@XZ
??3@YAXPAX@Z
??0exception@@QAE@XZ
_CxxThrowException
ispunct
wcslen
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
islower
_stricmp
GetWindowThreadProcessId
GetClassNameA
EnumChildWindows
OpenClipboard
wsprintfA
SetWindowPos
EnumWindows
KillTimer
DefWindowProcA
SetTimer
CloseClipboard
ShowWindow
RegisterClassExA
CreateWindowExA
TranslateMessage
GetMessageA
DispatchMessageA
SystemParametersInfoA
UuidToStringA
Netbios
SHSetValueA
SHGetValueA
StrStrIA
timeGetTime
GetFileVersionInfoSizeA
GetFileVersionInfoA
InternetOpenA
InternetSetOptionA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
lstrcpyA
lstrlenA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
GetProcessHeap
GetThreadTimes
HeapFree
Sleep
GetCurrentThread
LocalFree
FormatMessageA
HeapSize
HeapAlloc
GetVersion
GetVersionExA
SetLastError
GetFullPathNameA
lstrcmpiA
lstrcmpA
GetLocalTime
GetProcessTimes
GetCurrentProcess
GetSystemDirectoryA
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetEnvironmentVariableA
GetCurrentDirectoryA
InterlockedExchange
GetWindowsDirectoryA
CloseHandle
CreateRemoteThread
WriteProcessMemory
SleepEx
VirtualAllocEx
OpenProcess
MultiByteToWideChar
GetSystemInfo
lstrcpynA
QueryPerformanceFrequency
GetCurrentProcessId
CreateFileA
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ