CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
2feed1a47c2100637ecdccf83bb36a72_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2feed1a47c2100637ecdccf83bb36a72_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2feed1a47c2100637ecdccf83bb36a72_JaffaCakes118
Size
111KB
MD5
2feed1a47c2100637ecdccf83bb36a72
SHA1
c2c9fac400200957d25b5ec274edc3b230df7d96
SHA256
c171b286c517569b29e3ce0149b4b12a207417e55c143b9a1fbfefe3783e7801
SHA512
897f7548a1fbdf00b9a2e3c00e5f41da5b171ed6124960a633f98e9684fbf0c31e195773a268e9d2d1ae3ca061b7c4fe71b994a01afe2a22d41c8c61aac13c32
SSDEEP
1536:s3wRyhcKCEPfqnpOWtixMzLBvVll1AK6HkvCKKwxBBLxFKSTXhftHmv0dl:sA4hcKJPfqn8OfBvnARHkaIRTxdw0D
Checks for missing Authenticode signature.
resource |
---|
2feed1a47c2100637ecdccf83bb36a72_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_strcmpi
_vsnprintf
tolower
memset
memcpy
exit
strrchr
wcsstr
wcscpy
wcsncat
strcpy
strstr
wcslen
time
srand
rand
strcat
free
strchr
strncpy
_except_handler3
malloc
mbstowcs
fopen
fseek
ftell
fclose
??2@YAPAXI@Z
wcscmp
??3@YAXPAX@Z
strlen
sprintf
_strupr
GetAdaptersInfo
BitBlt
DeleteObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA
SelectObject
GetModuleHandleA
GetFileSize
ReadFile
WideCharToMultiByte
GetFileAttributesW
GetTempPathA
DeleteFileA
Sleep
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
LoadLibraryA
FreeLibrary
HeapAlloc
GetProcessHeap
MultiByteToWideChar
lstrlenA
CloseHandle
SetFilePointer
GetWindowRect
wsprintfA
GetWindowTextA
FindWindowA
GetWindow
GetClassNameW
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetDC
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE