DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2e79826e612923d90f5e499fd463f973_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e79826e612923d90f5e499fd463f973_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e79826e612923d90f5e499fd463f973_JaffaCakes118
Size
44KB
MD5
2e79826e612923d90f5e499fd463f973
SHA1
f057f2eb9780626cc3caed43c076850fa25fbb80
SHA256
f30ef920989d24b6a6940c0421d864dc06dce839d045e4e5d6a94d32a1dd3cf8
SHA512
bd0dac51da2a81b71a5ba323371a7425b98890faa6d2bd5948ba3648a1fdf41a9cebc82d78d9d629e87edc887bb9fb1b7891f58705254d01fded038f7b4ef8bc
SSDEEP
768:mpkavVgkwd+vjMe6blWAnLgE+XUJXUd/DfCGmagLa1LKA:VYvvjM3W+8TXUJXu6Law
Checks for missing Authenticode signature.
resource |
---|
2e79826e612923d90f5e499fd463f973_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetModuleFileNameA
InterlockedIncrement
WinExec
GetWindowsDirectoryA
GetProcAddress
CreateProcessA
GetLocalTime
VirtualAlloc
CreateThread
CreateMutexA
GetLastError
CloseHandle
GetSystemDirectoryA
DispatchMessageA
TranslateMessage
GetMessageA
SetWindowsHookExA
CallNextHookEx
ShowWindow
KillTimer
SetTimer
FindWindowExA
PostMessageA
DefWindowProcA
CreateWindowExA
RegisterClassExA
UnhookWindowsHookEx
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
fopen
_adjust_fdiv
malloc
_initterm
free
_pctype
__CxxFrameHandler
strchr
sprintf
_stricmp
fwrite
fclose
_except_handler3
strrchr
??2@YAPAXI@Z
??3@YAXPAX@Z
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ