DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e10cde691b51bddb29977c5dbae464b2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e10cde691b51bddb29977c5dbae464b2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e10cde691b51bddb29977c5dbae464b2_JaffaCakes118
Size
188KB
MD5
e10cde691b51bddb29977c5dbae464b2
SHA1
77a95d6e08b672b736ed522c64dd00fa2bb3baeb
SHA256
bf7877d44559bba88aec89f0bf0fd7a5dfec24a40d55546555b46ddf37f668d7
SHA512
613fa56d2250183c5021840b31700e53a5509e0cfc3808baa368d0b140339caa0fc6ed44f7515bf6d1b7aa406172efa61db9f2c1c628d01e0f98a5454db52cac
SSDEEP
3072:tkLp/r6fm3rrq7HOupZRlp482GLfZlKMBKLJ0k2gJ8gMwH7M/rmYNR:uLlIerrq7H7Lzp4L4fZlNM0nlgMm2xNR
Checks for missing Authenticode signature.
resource |
---|
e10cde691b51bddb29977c5dbae464b2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenUrlA
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetSetOptionA
InternetReadFile
timeGetTime
SysAllocString
SysFreeString
VariantClear
GetErrorInfo
CoTaskMemFree
CoInitialize
CoCreateGuid
CoCreateInstance
CoTaskMemAlloc
EnumChildWindows
EnumWindows
RegisterClassExA
CreateWindowExA
KillTimer
GetClassNameA
TranslateMessage
DispatchMessageA
OpenClipboard
CloseClipboard
wsprintfA
SystemParametersInfoA
SetWindowPos
DefWindowProcA
GetMessageA
SetTimer
ShowWindow
GetWindowThreadProcessId
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
SHSetValueA
StrStrIA
SHGetValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
UuidToStringA
strerror
isupper
wcslen
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
_CxxThrowException
??1exception@@UAE@XZ
wcscmp
strncpy
wctomb
__mb_cur_max
strchr
strstr
fclose
fwrite
fopen
tmpnam
atoi
strtol
isspace
_stricmp
isalpha
isgraph
srand
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
tolower
isalnum
strtok
printf
toupper
ispunct
isxdigit
??3@YAXPAX@Z
__CxxFrameHandler
islower
free
malloc
??2@YAPAXI@Z
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
RegOpenKeyExA
Netbios
WaitForSingleObject
MoveFileExA
LoadLibraryA
VirtualAllocEx
GetProcAddress
WriteProcessMemory
CreateRemoteThread
FreeLibrary
lstrcpynA
lstrcpyA
GetWindowsDirectoryA
GetFullPathNameA
InterlockedExchange
SetLastError
FormatMessageA
LocalFree
GetEnvironmentVariableA
lstrlenA
GetLocalTime
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
GetCurrentProcess
GetProcessTimes
OpenProcess
GetVersion
GetCurrentDirectoryA
GetVersionExA
CreateFileA
CloseHandle
lstrcmpA
lstrcmpiA
HeapAlloc
HeapSize
GetSystemInfo
Sleep
GetProcessHeap
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
GetTickCount
SleepEx
DeleteFileA
GetCurrentProcessId
GetThreadTimes
QueryPerformanceFrequency
GetCurrentThread
GetModuleHandleA
MultiByteToWideChar
GetLastError
QueryPerformanceCounter
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ