DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
38ded679b79b00e640b5d2b009368469_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38ded679b79b00e640b5d2b009368469_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38ded679b79b00e640b5d2b009368469_JaffaCakes118
Size
44KB
MD5
38ded679b79b00e640b5d2b009368469
SHA1
4888fdbf80444125e42696b8973590f74482c39f
SHA256
c74a79bd3e12b108ff9902737932e57e2aed5cdec8a4c880325c2df57915d130
SHA512
24ca530e0c6f93b025c345784dd5ecddfe96dee589f266d4c5e773a1614b89e577e4b1a0769c3f0656aa1d6ff73fa28421b37b2a2220c2e135f3f882f353a9de
SSDEEP
768:p86hkfCLxZT2qloQfO66gF6JfClZlb96qjKfNpkavVSPXKgLa1hce:66W4ZTbloQGVgFkqZlbHKfUM2HLajce
Checks for missing Authenticode signature.
resource |
---|
38ded679b79b00e640b5d2b009368469_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowsDirectoryA
GetSystemDirectoryA
GetLocalTime
GetModuleFileNameA
WinExec
GetLastError
CreateMutexA
CreateProcessA
InterlockedIncrement
LoadLibraryA
GetProcAddress
VirtualAlloc
CreateThread
CloseHandle
SetTimer
KillTimer
ShowWindow
CreateWindowExA
DefWindowProcA
SetWindowsHookExA
FindWindowExA
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
UnhookWindowsHookEx
RegisterClassExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
??3@YAXPAX@Z
_adjust_fdiv
malloc
_initterm
free
strrchr
_pctype
__CxxFrameHandler
??2@YAPAXI@Z
_stricmp
strchr
sprintf
_except_handler3
fclose
fwrite
fopen
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ