DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
db1f6477e6d6ce79f29e29d6aa789a7e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
db1f6477e6d6ce79f29e29d6aa789a7e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
db1f6477e6d6ce79f29e29d6aa789a7e_JaffaCakes118
Size
176KB
MD5
db1f6477e6d6ce79f29e29d6aa789a7e
SHA1
674cf634eee923c4123e070f0eac7214ab7f9f85
SHA256
a91dce9a7f4ad88f483c7d40c8162be8ca9e1db680cd0eedcc0fc46400836be4
SHA512
76326e6e7445686546b10af6943b1cf2284024d397a7f90fef6ad516c155772995477391e0d62877a1558a55c9a0549c630367831a8679b1703a51cc9f240ebd
SSDEEP
3072:qabrbEe+uaE2slPfFiSNmPqHl5ftkEIMYbwtEDmyuJJXBNJ5tkES3qMZ:7brbEFifJNm8l5KKYb8wmyuXBx6/
Checks for missing Authenticode signature.
resource |
---|
db1f6477e6d6ce79f29e29d6aa789a7e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrStrIA
SHGetValueA
SHSetValueA
UuidToStringA
timeGetTime
??2@YAPAXI@Z
??3@YAXPAX@Z
free
malloc
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
strstr
strtol
atoi
tmpnam
fopen
fwrite
fclose
srand
isxdigit
strerror
ispunct
islower
isgraph
__mb_cur_max
wctomb
strtok
toupper
strchr
isalnum
printf
isalpha
tolower
isupper
wcscmp
??1exception@@UAE@XZ
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
_CxxThrowException
wcslen
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
strncpy
isspace
InternetSetOptionA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
VariantClear
SysAllocString
SysFreeString
GetErrorInfo
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateGuid
CoCreateInstance
KillTimer
DefWindowProcA
SetTimer
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
SystemParametersInfoA
SetWindowPos
wsprintfA
OpenClipboard
CloseClipboard
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
ShowWindow
Netbios
SetSecurityInfo
GetSecurityInfo
RegCloseKey
RegOpenKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetEntriesInAclA
GetFileVersionInfoA
GetFileVersionInfoSizeA
Sleep
GetLocalTime
GetTickCount
HeapFree
QueryPerformanceFrequency
GetVersion
HeapSize
HeapAlloc
lstrlenA
GetLastError
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryA
LocalFree
QueryPerformanceCounter
FormatMessageA
lstrcmpiA
SetLastError
GetFullPathNameA
lstrcmpA
CloseHandle
CreateFileA
GetThreadTimes
GetCurrentThread
OpenProcess
GetCurrentProcessId
SleepEx
lstrcpynA
GetModuleFileNameA
MultiByteToWideChar
GetSystemDirectoryA
GetSystemInfo
GetModuleHandleA
GetProcessTimes
GetCurrentProcess
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetCurrentDirectoryA
CreateRemoteThread
GetWindowsDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetVersionExA
WriteProcessMemory
VirtualAllocEx
GetProcessHeap
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ