DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b3bdc23bb2c2077e44ecf2f4078aa4f9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3bdc23bb2c2077e44ecf2f4078aa4f9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b3bdc23bb2c2077e44ecf2f4078aa4f9_JaffaCakes118
Size
156KB
MD5
b3bdc23bb2c2077e44ecf2f4078aa4f9
SHA1
b4e48997921ca99920912a4c5df8df49112e4981
SHA256
edb51d606df30f5995fe79797a42baa56952a182f4238676d89d0224703eed6c
SHA512
c243d6afdfcc17ddd56d738593a75ad527f9d6510517540b831d06ef45f5d278953246ea74a13937538190f13bddd3f226fca71f7bb5998a241f4bb48f097434
SSDEEP
3072:6dQuBsUpjVLhujpUCQgtdXTlnIbeek5JGpACvGCh:2xpjPYprhIXkCJ
Checks for missing Authenticode signature.
resource |
---|
b3bdc23bb2c2077e44ecf2f4078aa4f9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UuidToStringA
StrStrIA
SHSetValueA
SHGetValueA
EnumWindows
SetWindowPos
SystemParametersInfoA
EnumChildWindows
GetWindowThreadProcessId
GetClassNameA
DefWindowProcA
SetTimer
KillTimer
CloseClipboard
OpenClipboard
DispatchMessageA
wsprintfA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
CryptGenRandom
CryptReleaseContext
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
InternetCloseHandle
InternetOpenA
HttpQueryInfoA
InternetSetOptionA
InternetOpenUrlA
InternetReadFile
timeGetTime
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
??0exception@@QAE@ABV0@@Z
printf
isalnum
_CxxThrowException
??0exception@@QAE@XZ
??1exception@@UAE@XZ
tolower
ispunct
isgraph
isalpha
?what@exception@@UBEPBDXZ
wcslen
wcscmp
strerror
isxdigit
isupper
wctomb
__mb_cur_max
isspace
srand
toupper
strtok
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
malloc
free
strchr
strtol
atoi
??2@YAPAXI@Z
fopen
fwrite
fclose
??3@YAXPAX@Z
strncpy
strstr
__CxxFrameHandler
_stricmp
tmpnam
islower
SysAllocString
SysFreeString
VariantClear
GetErrorInfo
GetFileVersionInfoA
GetFileVersionInfoSizeA
Netbios
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
lstrcmpiA
GetEnvironmentStrings
FreeEnvironmentStringsA
lstrcpynA
GetSystemInfo
lstrcpyA
lstrcmpA
InterlockedExchange
SetLastError
GetVersionExA
GetWindowsDirectoryA
GetModuleHandleA
GetModuleFileNameA
lstrlenA
CreateFileA
CreateRemoteThread
HeapAlloc
GetProcessHeap
CloseHandle
OpenProcess
GetFullPathNameA
FreeLibrary
GetEnvironmentVariableA
FormatMessageA
LocalFree
MultiByteToWideChar
GetCurrentProcessId
GetCurrentProcess
GetProcessTimes
GetCurrentThread
GetThreadTimes
GetLastError
Sleep
GetLocalTime
GetSystemDirectoryA
WriteProcessMemory
GetProcAddress
VirtualAllocEx
LoadLibraryA
MoveFileExA
QueryPerformanceCounter
GetTickCount
QueryPerformanceFrequency
WaitForSingleObject
CreateProcessA
DeleteFileA
SleepEx
HeapFree
GetCurrentDirectoryA
GetVersion
HeapSize
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ