COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
fe305649dbd5060629bb29a3f4a2a583_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe305649dbd5060629bb29a3f4a2a583_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fe305649dbd5060629bb29a3f4a2a583_JaffaCakes118
Size
32KB
MD5
fe305649dbd5060629bb29a3f4a2a583
SHA1
d5ecd63c0c6ab02cf12064a8b544e5f847769694
SHA256
5d2b5377d92a7df613e99d679bf9f1bcf3ef963bf25a41ec74f49e9bf74d05e4
SHA512
e39b8d7eb2075bf393e4e2c01dcf4e5ca0d5f1c50f0f36a3e2112c22f98ff04b38bbe8afa7ee366982f602f90538e59a5815df99d77c8ded68856b3f00e558d7
SSDEEP
768:trHNdnRXyHFWdMCEoz8e7tlyEhh0/zhhD84R4goB5:tDNdnRXyHvCEoz7tgE8fdR4goB5
Checks for missing Authenticode signature.
resource |
---|
fe305649dbd5060629bb29a3f4a2a583_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
CreateThread
WaitForSingleObject
ReadFile
GetFileSize
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
SetFileAttributesA
MultiByteToWideChar
DeleteFileA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
GetCommandLineA
ExitProcess
IsBadReadPtr
GetCurrentDirectoryA
GetPrivateProfileStringA
GetParent
GetWindowThreadProcessId
EnumWindows
wsprintfA
GetWindowTextA
ReleaseDC
GetWindowRect
GetDC
GetDesktopWindow
GetClientRect
CallWindowProcA
GetClassNameA
SetWindowLongA
RegisterShellHookWindow
RegisterWindowMessageA
CreateDCA
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GdipCloneImage
GdipAlloc
GdipFree
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipDisposeImage
GdiplusShutdown
GdipLoadImageFromFile
GdipSaveImageToFile
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
inet_ntoa
send
recv
socket
inet_addr
htons
connect
closesocket
gethostbyname
WSACleanup
WSAStartup
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA
_access
strrchr
strchr
atoi
strstr
abs
__dllonexit
_onexit
_initterm
_adjust_fdiv
_stricmp
_getpid
_strlwr
_strrev
free
malloc
wcscmp
??2@YAPAXI@Z
memcpy
__CxxFrameHandler
strcmp
strncpy
strcpy
memset
sprintf
strlen
strcat
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ