DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
42849b0c3ee88ffe16233fdb1385da34_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42849b0c3ee88ffe16233fdb1385da34_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
42849b0c3ee88ffe16233fdb1385da34_JaffaCakes118
Size
44KB
MD5
42849b0c3ee88ffe16233fdb1385da34
SHA1
94611f9d9d5a315daf9ac8b020fdf9cd1aff0ec2
SHA256
06631345d0e8f5cd1dfeba4114b963782f7d39bea7335fae5de7e2e18360c436
SHA512
d97c774621a18dd1c8170ff9e83325bfe549cfa5f3f6159be4cdeec0d61306a17f65e78a2e42d57677fa8032a2d430a97bfab62f955b2a9440b61eeb2ef439f2
SSDEEP
768:PGjFt+BHkIaydteDAu/1RTpkavHatEWRWeUcQtEXgLa1V6:+hvxgwce9LaP
Checks for missing Authenticode signature.
resource |
---|
42849b0c3ee88ffe16233fdb1385da34_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
GetLastError
CreateMutexA
GetProcAddress
GetLocalTime
LoadLibraryA
VirtualAlloc
CreateProcessA
CreateThread
CloseHandle
GetSystemDirectoryA
GetWindowsDirectoryA
WinExec
InterlockedIncrement
ShowWindow
CreateWindowExA
PostMessageA
FindWindowExA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
SetTimer
DefWindowProcA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
SHGetValueA
strchr
_adjust_fdiv
malloc
_initterm
free
_except_handler3
__CxxFrameHandler
strrchr
atoi
??2@YAPAXI@Z
??3@YAXPAX@Z
_stricmp
sprintf
fopen
fclose
fwrite
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ