COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
3dca8704a1e571d3ccafc730c0291963_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3dca8704a1e571d3ccafc730c0291963_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3dca8704a1e571d3ccafc730c0291963_JaffaCakes118
Size
26KB
MD5
3dca8704a1e571d3ccafc730c0291963
SHA1
4ca1f3ad28b8428da72b4f4cae35b1e26f3b36e1
SHA256
bfd6b4716d28de99c00b7d0de3e12bce6a028cdd7248f7109b88b883e1fc81dc
SHA512
9f747488acb6a5369a007823a50c4ec0d69a3733f0a92e13a7ecc45efe25663bfc40002a63a24013697daf5045052f0a8807ef5687474fe1b31c661d7b9e7423
SSDEEP
384:U44myW/9N4NDN3VOjZk9oMhNGk2W577bopb8JzLvZa7xzaRI29drg:l5yWIN3pCMhNGK57gpQJvQ7QRrrg
Checks for missing Authenticode signature.
resource |
---|
3dca8704a1e571d3ccafc730c0291963_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
CreateThread
WaitForSingleObject
ReadFile
SetFilePointer
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
SetFileAttributesA
GetCommandLineA
CreateMutexA
DeleteFileA
CreateFileA
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
IsBadReadPtr
GetCurrentDirectoryA
GetPrivateProfileIntA
WritePrivateProfileStringA
Sleep
ExitProcess
GetParent
GetWindowThreadProcessId
EnumWindows
wsprintfA
GetWindowTextA
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
inet_ntoa
send
recv
socket
inet_addr
htons
connect
closesocket
gethostbyname
WSACleanup
WSAStartup
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA
_access
strrchr
memset
strchr
atoi
strncpy
free
_onexit
_initterm
_adjust_fdiv
_getpid
_stricmp
_strlwr
_strrev
__dllonexit
strstr
malloc
??2@YAPAXI@Z
__CxxFrameHandler
strlen
strcmp
strcat
sprintf
memcpy
strcpy
Netbios
COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ