?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
Static task
static1
Behavioral task
behavioral1
Sample
b43968a922439507fe151687cb5cf50a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b43968a922439507fe151687cb5cf50a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b43968a922439507fe151687cb5cf50a_JaffaCakes118
Size
96KB
MD5
b43968a922439507fe151687cb5cf50a
SHA1
c5517299f420efeb8c3445b57086e0c829d86ef2
SHA256
95dac574680b5db48c67cedab4b729668081fa99630c480c9617cf53c0ebd44e
SHA512
16e99bd9be244307330b3d1bbcaadc87474ae17f9e2f75788e7e3d421ae95442d6d540b7d86802ee2a0ce79be534b5819c6c16a21174ab61e4d0b8f82692f176
SSDEEP
1536:bRKkOL9EXUrd/Ziz2mN8PTCcOXxiiZXzSDfbeagrdjHgv:dKBeG3izvmTEiW2DDCs
Checks for missing Authenticode signature.
resource |
---|
b43968a922439507fe151687cb5cf50a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
ResetEvent
WaitForSingleObject
CreateEventA
SleepEx
SetEvent
OpenEventA
WriteFile
OpenMutexA
GetModuleFileNameA
GetWindowsDirectoryA
DisableThreadLibraryCalls
ReadDirectoryChangesW
GetFileAttributesExA
WideCharToMultiByte
GetDriveTypeA
GetLogicalDriveStringsA
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
VirtualProtect
ExitProcess
CreateFileMappingA
FreeLibraryAndExitThread
VirtualFree
VirtualAlloc
Process32Next
Process32First
CreateToolhelp32Snapshot
Module32Next
Module32First
GetCurrentProcessId
VirtualQuery
GetSystemInfo
Thread32Next
Thread32First
QueryDosDeviceA
OpenProcess
lstrlenW
GetVersionExA
FindNextFileA
FindFirstFileA
MultiByteToWideChar
ReadFile
CreatePipe
GetLastError
MapViewOfFile
GetFileSize
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
CloseHandle
CreateThread
ReleaseMutex
GetTempPathA
GetTempFileNameA
Sleep
CreateProcessA
WinExec
CopyFileA
SetFileAttributesA
FreeLibrary
CreateMutexA
LoadLibraryA
PulseEvent
KillTimer
CallNextHookEx
SetWindowsHookExA
SetDlgItemTextA
GetDlgItemTextA
DialogBoxParamA
IsWindow
EnumDesktopWindows
GetWindowTextA
GetClassNameA
EnumChildWindows
EnumWindows
GetParent
OffsetRect
SetWindowPos
GetDlgItem
GetWindowThreadProcessId
UnhookWindowsHookEx
PrintWindow
GetWindowRect
GetClientRect
IsRectEmpty
GetWindowDC
GetDC
GetDesktopWindow
MessageBoxA
ShowWindow
SetTimer
SendMessageA
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
BitBlt
CreateCompatibleDC
DeleteObject
DeleteDC
RegDeleteValueA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
CoCreateInstance
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
SysAllocString
SysFreeString
VariantClear
SysStringLen
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
InternetWriteFile
HttpEndRequestA
HttpSendRequestExA
InternetConnectA
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetCrackUrlA
setsockopt
closesocket
WSACleanup
GetProcessImageFileNameA
PathFileExistsA
fflush
strstr
_ltoa
abs
wcsstr
_mbslwr
memmove
malloc
wcscmp
free
_mbscmp
_mbsstr
fwrite
_snprintf
_ismbcprint
memcmp
strncpy
memset
_purecall
clock
_mbsrchr
??2@YAPAXI@Z
sprintf
strcpy
strcat
__CxxFrameHandler
fclose
fopen
atol
printf
_except_handler3
__dllonexit
_onexit
_initterm
_adjust_fdiv
_mbsupr
_memicmp
_mbsnbcpy
_mbsicmp
_mbstok
atoi
strlen
_mbschr
memcpy
GdipCloneImage
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipFree
GdipDisposeImage
GdipSaveImageToStream
GdiplusStartup
ord17
GetAdaptersInfo
UuidCreate
UuidToStringA
RpcStringFreeA
SHGetFolderPathA
?GetOS@Utility@@SAKXZ
_LOADLIBRARY_DUMMY
_RunAs@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ