COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
bebf701e9d1200e55832c8fc27988b5f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bebf701e9d1200e55832c8fc27988b5f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bebf701e9d1200e55832c8fc27988b5f_JaffaCakes118
Size
35KB
MD5
bebf701e9d1200e55832c8fc27988b5f
SHA1
40e08e7887e62530a491f099f2986a33f55c2ce9
SHA256
7944cfa167e05c63d607258cd9ed44d1de6b3c45464c284eada384168eed0e72
SHA512
57789126e6707eb6bb2cbd9ab5c6996e1af7d9ca4e098a691e08b355ecb9694668fc67d316f95df9561c9353cb83262ea6e9db2e6e83d30c5debcb2212124639
SSDEEP
768:881qTcYVr4QjSYqv/OlU7QMh5rPKChwT9kRIH3j:h1qTn+5v57Vh5/6BkROT
Checks for missing Authenticode signature.
resource |
---|
bebf701e9d1200e55832c8fc27988b5f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileSize
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
CreateToolhelp32Snapshot
ReadFile
TerminateProcess
OpenProcess
SetFileAttributesA
GetCommandLineA
WaitForSingleObject
GetSystemDirectoryA
MultiByteToWideChar
DeleteFileA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
GetCurrentDirectoryA
GetPrivateProfileStringA
ExitProcess
CreateThread
IsBadReadPtr
Sleep
GetParent
GetWindowThreadProcessId
ReleaseDC
wsprintfA
GetWindowTextA
GetWindowRect
GetDC
GetDesktopWindow
SelectObject
CreateCompatibleBitmap
DeleteObject
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GetDeviceCaps
CreateDCA
CreateCompatibleDC
BitBlt
CryptHashData
CryptGetHashParam
CryptCreateHash
CryptAcquireContextA
GdipCloneImage
GdipAlloc
GdipFree
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipSaveImageToFile
GdiplusShutdown
GdipLoadImageFromFile
GdipDisposeImage
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
inet_ntoa
send
recv
socket
inet_addr
htons
connect
closesocket
gethostbyname
WSACleanup
WSAStartup
_access
strrchr
strchr
atoi
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_getpid
_stricmp
_strlwr
_strrev
malloc
wcscmp
??2@YAPAXI@Z
memcpy
__CxxFrameHandler
strcat
strncmp
strstr
memset
sprintf
strncpy
strcmp
strcpy
strlen
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ