DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
196c4189088a3e7fed30d4429c1b24f3_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
196c4189088a3e7fed30d4429c1b24f3_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
196c4189088a3e7fed30d4429c1b24f3_JaffaCakes118
Size
44KB
MD5
196c4189088a3e7fed30d4429c1b24f3
SHA1
16669883cbf116e6a0fb12d3704ad3470cc1feaa
SHA256
42690f42477ccaf18c7ffe5ba5709fdf8ef6434b29f4b280c902de151af1401d
SHA512
84f7c9518813273d95d3c74253b57e092b75aa1502b69a6bb53f820bb463da4376504933c743e53d1ee12207138e56d3c7a19bbcce0f678ed736003b4e17fd0b
SSDEEP
768:UJqZ7jnDPWcpkavdNPmXr9bpKsKnLBVgLa1M5h:zjnDOvsP49bpdiALa
Checks for missing Authenticode signature.
resource |
---|
196c4189088a3e7fed30d4429c1b24f3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
VirtualAlloc
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
GetModuleFileNameA
CreateMutexA
GetLocalTime
InterlockedIncrement
GetProcAddress
CloseHandle
GetLastError
CreateProcessA
DispatchMessageA
TranslateMessage
GetMessageA
DefWindowProcA
FindWindowExA
UnhookWindowsHookEx
SetWindowsHookExA
RegisterClassExA
CreateWindowExA
ShowWindow
KillTimer
CallNextHookEx
PostMessageA
SetTimer
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
fwrite
_adjust_fdiv
malloc
_initterm
free
strrchr
atoi
strchr
fopen
_stricmp
fclose
_except_handler3
sprintf
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ