DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
29342b541542dc7ced94bc9036275050_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
29342b541542dc7ced94bc9036275050_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29342b541542dc7ced94bc9036275050_JaffaCakes118
Size
44KB
MD5
29342b541542dc7ced94bc9036275050
SHA1
eed1832b4e9bccbe981b83b81f8680e9fb6e7eb8
SHA256
a8b8ec70a63207f8bffe5964d1dd365b7887eb4e9b8c67d3495cbcbb4d5fc2ca
SHA512
67f1ddb2282590b68608074b04fb948aebbb94b29282085651d61a18b3ee318d584426af055a9f71ca6f7f98635a0f3b139d155c17bcce397d22a829a7416af7
SSDEEP
384:5bFzOvZaBnQmQCs0Dtkav5BZEHz0ZxHOWOsT5G1ShKdJpJgLa0Mpq:zvjQCtpkav/2OkWD5kSh8gLa1I
Checks for missing Authenticode signature.
resource |
---|
29342b541542dc7ced94bc9036275050_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLocalTime
CreateThread
VirtualAlloc
GetProcAddress
LoadLibraryA
CreateMutexA
CreateProcessA
GetModuleFileNameA
InterlockedIncrement
GetLastError
CloseHandle
GetSystemDirectoryA
GetWindowsDirectoryA
WinExec
UnhookWindowsHookEx
DispatchMessageA
TranslateMessage
GetMessageA
RegisterClassExA
PostMessageA
CallNextHookEx
SetTimer
KillTimer
CreateWindowExA
ShowWindow
SetWindowsHookExA
DefWindowProcA
FindWindowExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SHGetValueA
strchr
_adjust_fdiv
malloc
_initterm
free
atoi
strrchr
_except_handler3
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_stricmp
sprintf
fopen
fclose
fwrite
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ