DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
26d00e71047b1d2c0fcfd7a5c868218a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26d00e71047b1d2c0fcfd7a5c868218a_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
26d00e71047b1d2c0fcfd7a5c868218a_JaffaCakes118
Size
40KB
MD5
26d00e71047b1d2c0fcfd7a5c868218a
SHA1
48a78d59d9839efa45e7fe0ad169d0ee5a4a3861
SHA256
3680a127c7e928f8dc806ffb84b0894acebcaaa968026b2f78e15c649badd288
SHA512
092be7926eedbe03c887941d422f876220d7d58023dc42e48a3cf13cf707a3c2b43c1fc995ab03654eb1f13b69c45f9bd1bc0bd7b5330917299a3148b991c4cf
SSDEEP
768:bptRsC1oL0kjdb0MUpkavrk1EPUQ+qKyzN9kgLa19P:bptuCKH+NL9bLav
Checks for missing Authenticode signature.
resource |
---|
26d00e71047b1d2c0fcfd7a5c868218a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateProcessA
GetSystemDirectoryA
WinExec
GetWindowsDirectoryA
InterlockedIncrement
LoadLibraryA
CreateMutexA
VirtualAlloc
GetProcAddress
GetModuleFileNameA
GetLocalTime
GetLastError
CreateThread
RegisterClassExA
ShowWindow
CreateWindowExA
PostMessageA
CallNextHookEx
SetTimer
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
SetWindowsHookExA
UnhookWindowsHookEx
KillTimer
FindWindowExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SHGetValueA
fclose
_adjust_fdiv
malloc
_initterm
free
atoi
_except_handler3
strchr
fopen
fwrite
_stricmp
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
strrchr
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA
Netbios
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ