DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
cee24f1695e88229619170198042bedd_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cee24f1695e88229619170198042bedd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cee24f1695e88229619170198042bedd_JaffaCakes118
Size
136KB
MD5
cee24f1695e88229619170198042bedd
SHA1
d3ffec31f434c3d43c29762c9d3d43c5191bb47a
SHA256
35216f224f379407ad5e40aea1b4dcceb332f360811bd038bcbce7744bc36c1f
SHA512
322b67d58f08918fe0d180f014673526d75c8db52fffc914812998aa04ed2908ada61063e4d0ea68e6558b2dbc1f3fb7390bc8d4b1ffd6218717fd923bd86355
SSDEEP
3072:FkUQHmtGkaVmwnqpCsMdjVRkkAIyJRgayMVNex:FwHmIBdqpCs8TkkzCgyVYx
Checks for missing Authenticode signature.
resource |
---|
cee24f1695e88229619170198042bedd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
SHSetValueA
SHGetValueA
StrStrIA
InternetSetOptionA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
InternetOpenUrlA
InternetOpenA
CloseClipboard
wsprintfA
SystemParametersInfoA
SetWindowPos
KillTimer
SetTimer
DefWindowProcA
DispatchMessageA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
OpenClipboard
GetClassNameA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
GetFileVersionInfoSizeA
GetFileVersionInfoA
isalnum
islower
free
fclose
fwrite
fopen
tmpnam
atoi
strtol
strerror
isalpha
tolower
isupper
?what@exception@@UBEPBDXZ
wcslen
wcscmp
srand
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
strstr
??1exception@@UAE@XZ
??0exception@@QAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
ispunct
isxdigit
malloc
__mb_cur_max
wctomb
isspace
strncpy
strchr
??2@YAPAXI@Z
strtok
??3@YAXPAX@Z
__CxxFrameHandler
printf
toupper
_stricmp
isgraph
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
GetErrorInfo
SysFreeString
SysAllocString
VariantClear
timeGetTime
CoCreateInstance
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
UuidToStringA
Netbios
QueryPerformanceFrequency
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
GetCurrentProcessId
InterlockedExchange
lstrcpynA
GetEnvironmentVariableA
lstrcpyA
lstrcmpA
lstrcmpiA
GetCurrentProcess
GetProcessTimes
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemDirectoryA
DeleteFileA
CreateProcessA
WaitForSingleObject
MoveFileExA
GetModuleHandleA
MultiByteToWideChar
GetCurrentThread
GetThreadTimes
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
SleepEx
OpenProcess
GetTickCount
GetWindowsDirectoryA
CloseHandle
CreateFileA
HeapFree
GetVersion
GetLastError
SetLastError
lstrlenA
GetFullPathNameA
HeapSize
HeapAlloc
GetProcessHeap
QueryPerformanceCounter
GetLocalTime
Sleep
GetCurrentDirectoryA
LocalFree
FormatMessageA
GetVersionExA
GetSystemInfo
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ