DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3907cec89eb0eb598986468c33b1369f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3907cec89eb0eb598986468c33b1369f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3907cec89eb0eb598986468c33b1369f_JaffaCakes118
Size
44KB
MD5
3907cec89eb0eb598986468c33b1369f
SHA1
52ce26fe72fac5b81e69fd9e0531751d55a53b8b
SHA256
b48d2adc589256200c8487c75a3a96affa7d83f857a4b4b23a7543dd30da03c2
SHA512
3b69c93bbbf06cb428e634a7161b91d47bf9ba57c497dcf36a731a12bd1c37d0e761f18937e6445d99c556ffd7d6201af32135604b64f150aeea928d13c6b839
SSDEEP
768:j4kjCKpkav147/eGbHr45CcAxaxFgLa1DR:UkCZFbHU5dAcMLaZR
Checks for missing Authenticode signature.
resource |
---|
3907cec89eb0eb598986468c33b1369f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetModuleFileNameA
InterlockedIncrement
GetLocalTime
VirtualAlloc
CreateMutexA
CreateProcessA
CreateThread
CloseHandle
GetSystemDirectoryA
GetWindowsDirectoryA
WinExec
GetLastError
ShowWindow
CreateWindowExA
CallNextHookEx
RegisterClassExA
PostMessageA
FindWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowsHookExA
UnhookWindowsHookEx
KillTimer
SetTimer
DefWindowProcA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SHGetValueA
strchr
_adjust_fdiv
malloc
_initterm
free
atoi
strrchr
__CxxFrameHandler
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z
_stricmp
sprintf
fopen
fclose
fwrite
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ