DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
171c38d14835a3c0fd8c8d8ace9ba3d8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
171c38d14835a3c0fd8c8d8ace9ba3d8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
171c38d14835a3c0fd8c8d8ace9ba3d8_JaffaCakes118
Size
116KB
MD5
171c38d14835a3c0fd8c8d8ace9ba3d8
SHA1
47c29ff1de2067cc6c60f603712d38ce4a73abda
SHA256
dae05ab46474e9d2ea848a70d0db1a77e3abe081024574bb2d18000d6b12aa83
SHA512
de57c3a99bee1c5607d856dbdaafed05ce6403b544ca63dc4e9a1d04dde94e9b93ddd873d0e321fec6348e7f8bfc9c344a9952d019aeba7200aa8b7a514d4dde
SSDEEP
1536:APBd0f2xhiIrGQsdIccbqICS4AUoCEIJ0QKWi9hJUDvgLarLeb4A:APBd0f0jsmaFEIJ0QKfZUDLrLe1
Checks for missing Authenticode signature.
resource |
---|
171c38d14835a3c0fd8c8d8ace9ba3d8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
SysFreeString
VariantClear
GetErrorInfo
SysAllocString
CoCreateInstance
CoTaskMemAlloc
CoInitialize
CoCreateGuid
CoTaskMemFree
StrStrIA
SHGetValueA
SHSetValueA
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
srand
strstr
strtok
toupper
wcscmp
wcslen
?what@exception@@UBEPBDXZ
printf
ispunct
isspace
_stricmp
isupper
isalpha
isalnum
__mb_cur_max
wctomb
islower
free
malloc
strchr
isxdigit
isgraph
strerror
??1exception@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
??0exception@@QAE@XZ
strncpy
atoi
??2@YAPAXI@Z
tmpnam
fopen
fwrite
fclose
??3@YAXPAX@Z
??0exception@@QAE@ABV0@@Z
tolower
UuidToStringA
HttpQueryInfoA
InternetReadFile
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
timeGetTime
EnumProcessModules
GetModuleBaseNameA
EnumProcesses
Netbios
GetFileVersionInfoSizeA
GetFileVersionInfoA
KillTimer
wsprintfA
EnumWindows
EnumChildWindows
GetWindowThreadProcessId
GetClassNameA
SetTimer
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
CloseClipboard
OpenClipboard
SetWindowPos
DispatchMessageA
SystemParametersInfoA
DisableThreadLibraryCalls
GetCurrentProcessId
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
OpenProcess
CreateFileA
lstrcpynA
InterlockedExchange
GetEnvironmentVariableA
Sleep
QueryPerformanceCounter
QueryPerformanceFrequency
MoveFileExA
CloseHandle
WaitForSingleObject
CreateProcessA
DeleteFileA
GetSystemDirectoryA
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
LocalFree
FormatMessageA
lstrlenA
GetVersion
GetVersionExA
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
SetLastError
GetFullPathNameA
HeapSize
HeapAlloc
GetProcessHeap
lstrcmpiA
lstrcmpA
SleepEx
GetLocalTime
GetThreadTimes
GetCurrentThread
GetCurrentDirectoryA
GetTickCount
lstrcpyA
GetSystemInfo
GetProcessTimes
GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
MultiByteToWideChar
GetWindowsDirectoryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ