Class
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Now
Object
Static task
static1
Behavioral task
behavioral1
Sample
4d4bbfd82bc23b73d2c32cbdfa47b8f4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d4bbfd82bc23b73d2c32cbdfa47b8f4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d4bbfd82bc23b73d2c32cbdfa47b8f4_JaffaCakes118
Size
10KB
MD5
4d4bbfd82bc23b73d2c32cbdfa47b8f4
SHA1
202da299afedf6fabc74f57709b2925d9d80eb14
SHA256
c24c635b180f6d58c96f8c6be8d19f0ef34b3bc840147b895e55316713662143
SHA512
6f97a0ec9a1d611f92d0d14d917b08b0c657c576c4fedb89e9e26cc7bbb85b65d390fefb6c9b7856691bb0b217985e6527dbd821acff5a32cb6f2998e833612a
SSDEEP
96:/XVGucSfZnayobA6v6OmiE6Fj6PlWGaBIICnFFr0tfGW+pKGq6VmuXfECy9EZL8T:/XVGuTrGAsxXn6tj5rRcGRXfxyP96/I
Checks for missing Authenticode signature.
resource |
---|
4d4bbfd82bc23b73d2c32cbdfa47b8f4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateFileA
GetWindowsDirectoryA
GetTempPathA
GetLastError
CreateDirectoryA
lstrcpyA
DeleteFileA
GetSystemDirectoryA
GetModuleFileNameA
Sleep
CreateDialogParamA
ShowWindow
SetTimer
DispatchMessageA
DefWindowProcA
GetDesktopWindow
IsDialogMessageA
IsWindow
GetMessageA
TranslateMessage
RegCreateKeyExA
RegCloseKey
ShellExecuteA
PathAppendA
SHSetValueA
SHDeleteKeyA
SHGetValueA
PathAddBackslashA
PathFindExtensionA
InternetGetConnectedState
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
SetupIterateCabinetA
memcpy
_adjust_fdiv
malloc
_initterm
strstr
fread
_stricmp
free
fopen
_snprintf
memset
fwrite
strlen
fclose
time
strncpy
sprintf
rand
srand
strncat
Class
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Now
Object
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ