DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4171788f6363ae24ccc769cac8db0963_JaffaCakes118.dll
Resource
win7-20240704-en
Target
4171788f6363ae24ccc769cac8db0963_JaffaCakes118
Size
32KB
MD5
4171788f6363ae24ccc769cac8db0963
SHA1
180086562302a9c551e8baa5c04129493d23d26d
SHA256
9e106e46ef88a300a21eeb38b10be0d83fc0735061445e2063dcb0bb8f2b8d8c
SHA512
7131ad8ebda89fcda2197e896e7dc6a048527b0e7951484698292419aa9f6c2b7215fb647fb035eb34eb884fc17b049a72944af4abc7ac5fbdbebf19cbd4562e
SSDEEP
384:fFnS2h9QATRk3vOg5YH/tFgR4zniD3wx88/KSFS/2MX:fEk9Y3vOg5q4l
Checks for missing Authenticode signature.
resource |
---|
4171788f6363ae24ccc769cac8db0963_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
time
_except_handler3
memcpy
_mbsstr
_mbslwr
_purecall
memcmp
fwrite
sscanf
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
localtime
_EH_prolog
__CxxFrameHandler
??2@YAPAXI@Z
fopen
fprintf
fclose
strcpy
strrchr
strncpy
sprintf
strlen
_stat
memset
_unlink
_strnicmp
fread
free
ord23
ord16
ord15
ord18
ord57
ord32
ord30
ord58
ord21
GetModuleFileNameA
GetTempPathA
DeleteCriticalSection
MoveFileExA
LeaveCriticalSection
EnterCriticalSection
lstrlenW
DisableThreadLibraryCalls
InitializeCriticalSection
GetTempFileNameA
InterlockedIncrement
InterlockedDecrement
LoadRegTypeLi
SysStringLen
SysFreeString
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ