DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
01e8ff995b6af80578f5062a5b7e4ed3_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
01e8ff995b6af80578f5062a5b7e4ed3_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
01e8ff995b6af80578f5062a5b7e4ed3_JaffaCakes118
Size
44KB
MD5
01e8ff995b6af80578f5062a5b7e4ed3
SHA1
d48f0935d2fe45d9db0532f2f95849ecac1b76d6
SHA256
92a566468d78522a026d2fd472f8e314e6ecb6e5bc8f27cdbf0fe3073ddd6987
SHA512
cc9976bbcde5576b272d564f10c0078a7d8ff5f46bd1fadaf4cf12e08fe2feeee5db0d3c390623f2ca3eaf9380cdf0f0a8b2de9fcb1bcd821598139f9e43e375
SSDEEP
768:dGxfMjNWKB6T7fzVEhyaNR1EpkavM6U6n4aKpd05u7gLa1z:dGxfjKITTzuhy4/3LYn4aKpyY0La5
Checks for missing Authenticode signature.
resource |
---|
01e8ff995b6af80578f5062a5b7e4ed3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMutexA
GetLocalTime
GetModuleFileNameA
CreateProcessA
GetSystemDirectoryA
GetLastError
WinExec
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
VirtualAlloc
CreateThread
CloseHandle
InterlockedIncrement
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
TranslateMessage
KillTimer
SetTimer
DefWindowProcA
SetWindowsHookExA
UnhookWindowsHookEx
FindWindowExA
CallNextHookEx
DispatchMessageA
PostMessageA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
strrchr
_adjust_fdiv
malloc
_initterm
free
strchr
fopen
fwrite
fclose
_stricmp
atoi
__CxxFrameHandler
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ