DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
33781a95c82d623422c16816ab48f847_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33781a95c82d623422c16816ab48f847_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
33781a95c82d623422c16816ab48f847_JaffaCakes118
Size
44KB
MD5
33781a95c82d623422c16816ab48f847
SHA1
3cfd0a172502b2dc444967f59dbe30d896362091
SHA256
f37dd53a34409a0be85ebfcef19dd27ecea848c4bf745f7b13aadd5303767336
SHA512
0a81d7002ce15c13fc347daef13eb6f6f69582d5f785c7004aee6241d30ac8f296e1a1b2e7d03d3194d449f7600684131bf4951a0259cbbf0e6d0c14e59e4bf5
SSDEEP
384:lgouotHz4250E8vJ1x0+YBSlKsDtkav5D7u9UVwEI5UlOdM+s8JpJgLa0Mp:lgotcy0lxVbpkavN7uWVbI5UDx8gLa1
Checks for missing Authenticode signature.
resource |
---|
33781a95c82d623422c16816ab48f847_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetLocalTime
CreateThread
GetProcAddress
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
CreateProcessA
InterlockedIncrement
GetModuleFileNameA
CreateMutexA
GetLastError
CloseHandle
VirtualAlloc
GetMessageA
CallNextHookEx
RegisterClassExA
DefWindowProcA
TranslateMessage
KillTimer
SetTimer
SetWindowsHookExA
CreateWindowExA
ShowWindow
FindWindowExA
UnhookWindowsHookEx
DispatchMessageA
PostMessageA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
_except_handler3
_adjust_fdiv
malloc
_initterm
free
strchr
fopen
fwrite
fclose
_stricmp
atoi
__CxxFrameHandler
sprintf
strrchr
??2@YAPAXI@Z
??3@YAXPAX@Z
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ