DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b08bfedf054240838ac53b6e5b855b1e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b08bfedf054240838ac53b6e5b855b1e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b08bfedf054240838ac53b6e5b855b1e_JaffaCakes118
Size
148KB
MD5
b08bfedf054240838ac53b6e5b855b1e
SHA1
2a849755bfeff65ff3965d02fbd951dca902537d
SHA256
6ef3baa0ecced347fad26aa35eb18b58b0cac3829b28880e2eb2efa67b67ed0c
SHA512
754efba5787695524c0b865f266f50551eee8006185f61f7d685acf7a027414423e885a824ed9242cb7efe1ff3f77a73ad636befa528354281918bb17c406528
SSDEEP
3072:k1tKD/1p6fU1mSPpVwYCCHtKmDoJjTG8xOemf3CHJ:yap31vVBCq4mDGTzhmf3U
Checks for missing Authenticode signature.
resource |
---|
b08bfedf054240838ac53b6e5b855b1e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrStrIA
SHSetValueA
SHGetValueA
GetModuleBaseNameA
EnumProcessModules
EnumProcesses
_stricmp
??0exception@@QAE@ABV0@@Z
tolower
printf
__CxxFrameHandler
_CxxThrowException
??0exception@@QAE@XZ
??3@YAXPAX@Z
??1exception@@UAE@XZ
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
strstr
strtok
??2@YAPAXI@Z
toupper
atoi
tmpnam
fopen
fwrite
fclose
free
srand
strchr
isgraph
isxdigit
wcscmp
?what@exception@@UBEPBDXZ
strerror
isspace
isupper
__mb_cur_max
malloc
wcslen
isalnum
wctomb
islower
isalpha
ispunct
strncpy
GetErrorInfo
SysFreeString
SysAllocString
VariantClear
CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
RegQueryValueExW
RegOpenKeyExA
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
RegCloseKey
timeGetTime
RegisterClassExA
wsprintfA
CloseClipboard
OpenClipboard
SetWindowPos
SystemParametersInfoA
DispatchMessageA
TranslateMessage
ShowWindow
CreateWindowExA
KillTimer
SetTimer
DefWindowProcA
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
GetMessageA
UuidToStringA
InternetCloseHandle
InternetOpenA
HttpQueryInfoA
InternetSetOptionA
InternetOpenUrlA
InternetReadFile
Netbios
GetFileVersionInfoA
GetFileVersionInfoSizeA
Sleep
GetCurrentProcess
GetProcessTimes
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetLastError
GetProcAddress
FreeLibrary
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExA
GetSystemInfo
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCurrentDirectoryA
GetThreadTimes
GetCurrentThread
GetSystemDirectoryA
SetLastError
MultiByteToWideChar
GetEnvironmentVariableA
lstrcpynA
InterlockedExchange
lstrcmpiA
lstrcmpA
SleepEx
CloseHandle
OpenProcess
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetCurrentProcessId
CreateFileA
GetLocalTime
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
LocalFree
FormatMessageA
HeapFree
lstrcpyA
lstrlenA
GetVersion
GetWindowsDirectoryA
HeapSize
GetProcessHeap
HeapAlloc
GetFullPathNameA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ