DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
08662d7a9f5e0ae9ab9f2b7ec6efdc2b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08662d7a9f5e0ae9ab9f2b7ec6efdc2b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
08662d7a9f5e0ae9ab9f2b7ec6efdc2b_JaffaCakes118
Size
148KB
MD5
08662d7a9f5e0ae9ab9f2b7ec6efdc2b
SHA1
8bc3ff447d43606aa8e0f6937d03b4315341f58b
SHA256
11c135390b365648d7d434bfaf261167ded198c94b8dd23b878dddd9a17459a5
SHA512
c32c7d3be68faf38d07c32e0fd4389e2bdbd7e2759c5a6ce390b94d1e95a526e3f5c3f4580c1824696acbc964fb19739389ae45174a650a18c5eb593aacee76e
SSDEEP
3072:+YN3l8N/yoENBgwn2M/adZdYU7OQ6BH0F/bV8Jk8b4U:1VayBNXnladHYU7QBHyDVhQ4
Checks for missing Authenticode signature.
resource |
---|
08662d7a9f5e0ae9ab9f2b7ec6efdc2b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
CoCreateInstance
InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
timeGetTime
_adjust_fdiv
_stricmp
??0exception@@QAE@ABV0@@Z
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
srand
strstr
wcscmp
isspace
wcslen
?what@exception@@UBEPBDXZ
isalnum
islower
isupper
tolower
ispunct
strerror
isalpha
strtok
toupper
strncpy
__CxxFrameHandler
_CxxThrowException
strchr
free
printf
isgraph
__mb_cur_max
malloc
wctomb
isxdigit
atoi
tmpnam
fopen
fwrite
fclose
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
SHGetValueA
StrStrIA
SHSetValueA
Netbios
GetMessageA
TranslateMessage
DispatchMessageA
GetClassNameA
ShowWindow
EnumChildWindows
OpenClipboard
CloseClipboard
wsprintfA
KillTimer
SetTimer
DefWindowProcA
SystemParametersInfoA
SetWindowPos
CreateWindowExA
RegisterClassExA
GetWindowThreadProcessId
EnumWindows
GetFileVersionInfoSizeA
GetFileVersionInfoA
VariantClear
SysFreeString
SysAllocString
GetErrorInfo
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
RegCloseKey
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegOpenKeyExA
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
RegQueryValueExW
UuidToStringA
GetThreadTimes
MultiByteToWideChar
GetSystemInfo
GetCurrentProcess
lstrlenA
GetEnvironmentStrings
GetCurrentThread
GetLastError
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
HeapSize
HeapAlloc
GetCurrentProcessId
SetLastError
GetFullPathNameA
LocalFree
FormatMessageA
HeapFree
FreeEnvironmentStringsA
GetLocalTime
GetProcessHeap
lstrcpynA
GetModuleFileNameA
lstrcmpiA
CreateFileA
GetModuleHandleA
GetProcessTimes
lstrcmpA
MoveFileExA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WaitForSingleObject
CreateProcessA
DeleteFileA
GetSystemDirectoryA
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
SleepEx
GetEnvironmentVariableA
GetCurrentDirectoryA
Sleep
GetVersionExA
GetWindowsDirectoryA
lstrcpyA
InterlockedExchange
GetVersion
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ