CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
dace0ce231ec99544f0f6ed8287ac63b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dace0ce231ec99544f0f6ed8287ac63b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dace0ce231ec99544f0f6ed8287ac63b_JaffaCakes118
Size
6.6MB
MD5
dace0ce231ec99544f0f6ed8287ac63b
SHA1
573933f0c3d1cfb9923ec7ccee369ff9599ffb2f
SHA256
33452307487ac97e5a4e85b13d62f26c26970448fd4c0c9e368bf4fcc58dda40
SHA512
0ba854e55e70b1fbe734515a92a8d48426f51466e0465b899c4016c45dda643ccb38366d5af99575a5080288099cfa66e74a799231d5d557e67a37963baf3faf
SSDEEP
1536:EBHHkhl56D7a3PGimetHEJynfHQK9QUXkSoOS2wbB+7:EBQj6DO3ur6EcPQXUPolnd+7
Checks for missing Authenticode signature.
resource |
---|
dace0ce231ec99544f0f6ed8287ac63b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_vsnprintf
realloc
isdigit
isalpha
tolower
_strupr
_strcmpi
__CxxFrameHandler
atoi
isprint
memcmp
malloc
exit
strrchr
??3@YAXPAX@Z
strcpy
strncpy
wcsstr
wcscpy
wcsncat
strstr
wcslen
time
srand
rand
strcat
free
strchr
memset
memcpy
sprintf
_except_handler3
strlen
mbstowcs
fopen
fseek
ftell
fclose
??2@YAPAXI@Z
wcscmp
_stricmp
_strdup
connect
htons
socket
WSAStartup
send
gethostbyname
recv
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA
DeleteDC
WideCharToMultiByte
GetFileAttributesW
GetTempPathA
DeleteFileA
ReadFile
GetPrivateProfileStringA
Sleep
GetCurrentProcessId
LoadLibraryA
FreeLibrary
GetFileSize
CloseHandle
SetFilePointer
HeapAlloc
GetProcessHeap
GetModuleHandleA
MultiByteToWideChar
lstrlenA
lstrcpynA
UnhookWindowsHookEx
SetWindowsHookExA
GetDC
GetWindowRect
wvsprintfA
GetWindow
GetWindowThreadProcessId
GetWindowTextA
wsprintfA
GetClassNameW
CallNextHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE