CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
112762913217920db397a5ec8934b34f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
112762913217920db397a5ec8934b34f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
112762913217920db397a5ec8934b34f_JaffaCakes118
Size
92KB
MD5
112762913217920db397a5ec8934b34f
SHA1
765ee6d684527a4a97f5994e57f8f6524b7c5883
SHA256
e8af2dc2f66af343450e95da57b380c9dcb14364b451c0ec919037b2ef59d0ff
SHA512
d0f620434918b6a1de16c2898b20f0f81e1ecdc34131ddc39cf806dff821ed452e2e6c9b55b178ad9b76e44ed5e71c5c1af063a2799d764e0a53f3e887573331
SSDEEP
1536:HQFqaknOzaRIrcB1tfypeumDPY3IOpUz6YR/OxVF:HT6aRIr9mbyIOpi6YdOh
Checks for missing Authenticode signature.
resource |
---|
112762913217920db397a5ec8934b34f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
memset
_vsnprintf
tolower
_except_handler3
memcpy
malloc
exit
strrchr
wcsstr
wcscpy
wcsncat
strstr
time
srand
rand
strcat
wcslen
strcmp
strncpy
free
_stricmp
strlen
mbstowcs
fopen
fseek
ftell
fclose
??2@YAPAXI@Z
wcscmp
??3@YAXPAX@Z
strcpy
sprintf
_strupr
_strcmpi
CreateDCA
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
DeleteDC
SetFilePointer
CloseHandle
GetFileSize
ReadFile
WideCharToMultiByte
GetFileAttributesW
GetTempPathA
DeleteFileA
GetModuleFileNameA
GetPrivateProfileStringA
OpenProcess
HeapAlloc
GetProcessHeap
MultiByteToWideChar
lstrlenA
Sleep
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetCurrentProcess
TerminateProcess
wsprintfA
GetWindow
GetClassNameW
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetDC
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE