DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
018de35c32d402202d61c82e6c5ad491_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
018de35c32d402202d61c82e6c5ad491_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
018de35c32d402202d61c82e6c5ad491_JaffaCakes118
Size
168KB
MD5
018de35c32d402202d61c82e6c5ad491
SHA1
a553632b98f0e1b312966fb5f2530899348de44c
SHA256
1a24ad881dedcd3be4d01e3f0b2d64f6fbe82fac471e3b31687059b45fcb8722
SHA512
f02f072452a153ac1317f2f759a95d80d71ac2e72e7723728d31cba5d7b6c9ae7a6da49872229fc425aef86c360ddb025eb75c839f753727e7fc34445f9a8009
SSDEEP
3072:cQ7DD725fIkip3lzNIKnlir0dZmwESm409aLuJDPXdt0uQ5D:t7DHme5bUwdZmCHIPXduBD
Checks for missing Authenticode signature.
resource |
---|
018de35c32d402202d61c82e6c5ad491_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
timeGetTime
Netbios
SHSetValueA
StrStrIA
SHGetValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetModuleBaseNameA
EnumProcesses
EnumProcessModules
EnumWindows
EnumChildWindows
GetWindowThreadProcessId
GetClassNameA
CloseClipboard
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
SetTimer
DefWindowProcA
wsprintfA
SystemParametersInfoA
SetWindowPos
OpenClipboard
strerror
srand
isalnum
isgraph
fclose
fwrite
fopen
tmpnam
atoi
strtol
toupper
strtok
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
free
ispunct
__mb_cur_max
malloc
isupper
isxdigit
isspace
strchr
islower
strncpy
strstr
wcscmp
?what@exception@@UBEPBDXZ
wcslen
printf
__CxxFrameHandler
??2@YAPAXI@Z
??1exception@@UAE@XZ
??3@YAXPAX@Z
_CxxThrowException
??0exception@@QAE@XZ
isalpha
tolower
??0exception@@QAE@ABV0@@Z
wctomb
VariantClear
GetErrorInfo
SysAllocString
SysFreeString
RegCloseKey
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegOpenKeyExA
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateInstance
CoCreateGuid
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile
UuidToStringA
GetCurrentProcess
GetProcessTimes
GetSystemInfo
GetCurrentThread
GetThreadTimes
CreateFileA
DeleteFileA
CreateProcessA
WaitForSingleObject
MoveFileExA
MultiByteToWideChar
GetCurrentProcessId
GetSystemDirectoryA
lstrcpyA
lstrcpynA
GetLocalTime
SleepEx
LoadLibraryA
GetProcAddress
WriteProcessMemory
CreateRemoteThread
FreeLibrary
lstrcmpA
GetVersion
CloseHandle
OpenProcess
Sleep
lstrlenA
GetCurrentDirectoryA
SetLastError
GetFullPathNameA
LocalFree
FormatMessageA
FreeEnvironmentStringsA
GetEnvironmentStrings
lstrcmpiA
HeapFree
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
GetWindowsDirectoryA
GetProcessHeap
HeapAlloc
VirtualAllocEx
GetLastError
HeapSize
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ