DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
291c69a73cf7f9c1f60628e8d77b153c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
291c69a73cf7f9c1f60628e8d77b153c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
291c69a73cf7f9c1f60628e8d77b153c_JaffaCakes118
Size
44KB
MD5
291c69a73cf7f9c1f60628e8d77b153c
SHA1
771ea125bc8bef3824b316a54e07dab8a10eccb8
SHA256
ee1c2158e1e6f17891feb0369d617e55e3f015a5f35d1c349871cc9eab30ace9
SHA512
89fb9cd84f588edddc6a200a8a6239227ffc9e3fb57e8ee403d9f126ab60af335597fb606510d9115390d59b175437ffdb7af5204837a994d010fba20b7a7833
SSDEEP
768:tnZDd4Y4Gmpkav/ZaDfzUvBUh1gLa1O5:tZF/bTCu8Laa
Checks for missing Authenticode signature.
resource |
---|
291c69a73cf7f9c1f60628e8d77b153c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
GetProcAddress
LoadLibraryA
WinExec
GetWindowsDirectoryA
CreateThread
GetModuleFileNameA
InterlockedIncrement
GetLocalTime
CreateProcessA
CreateMutexA
GetLastError
CloseHandle
GetSystemDirectoryA
RegisterClassExA
CallNextHookEx
DispatchMessageA
TranslateMessage
GetMessageA
SetWindowsHookExA
KillTimer
SetTimer
DefWindowProcA
CreateWindowExA
ShowWindow
UnhookWindowsHookEx
FindWindowExA
PostMessageA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SHGetValueA
fwrite
_adjust_fdiv
malloc
_initterm
free
atoi
strrchr
??2@YAPAXI@Z
??3@YAXPAX@Z
strchr
fopen
_stricmp
fclose
_except_handler3
sprintf
__CxxFrameHandler
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ