DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
341d872ecd70442f25d2cf81857cd8a3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
341d872ecd70442f25d2cf81857cd8a3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
341d872ecd70442f25d2cf81857cd8a3_JaffaCakes118
Size
44KB
MD5
341d872ecd70442f25d2cf81857cd8a3
SHA1
d37bc5ee74f57454b888b3ebb698993b3e46b9ac
SHA256
11a0f52e21fb5cbace5d092b8856e065ab59ce4123048b72647d901f537d7b2a
SHA512
ad23cb9d593b7ba6df671f92db50f328bd5cb55f40d2870a924abf3eea22d45587ce1b45e2d015913649bf74e96d6049ffa568659ba1c5118e793cbbe1543b56
SSDEEP
768:vvQp7IwKjEpMiScQJ5FNxV21pkavhGIUuzh2EmpcXK9gxgLa1Oa:vS7pWEJSxJHNxV28SLzNmpcaDLaP
Checks for missing Authenticode signature.
resource |
---|
341d872ecd70442f25d2cf81857cd8a3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateProcessA
GetSystemDirectoryA
CreateThread
LoadLibraryA
GetLastError
GetProcAddress
VirtualAlloc
WinExec
GetWindowsDirectoryA
InterlockedIncrement
GetModuleFileNameA
GetLocalTime
CreateMutexA
CallNextHookEx
SetWindowsHookExA
RegisterClassExA
DispatchMessageA
TranslateMessage
GetMessageA
UnhookWindowsHookEx
KillTimer
SetTimer
DefWindowProcA
FindWindowExA
PostMessageA
CreateWindowExA
ShowWindow
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SHGetValueA
__CxxFrameHandler
_adjust_fdiv
malloc
_initterm
free
atoi
strchr
fopen
fwrite
fclose
_except_handler3
_stricmp
??3@YAXPAX@Z
??2@YAPAXI@Z
strrchr
sprintf
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ