DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5d31f1a04a701e717f92caea6e6ed891_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d31f1a04a701e717f92caea6e6ed891_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d31f1a04a701e717f92caea6e6ed891_JaffaCakes118
Size
44KB
MD5
5d31f1a04a701e717f92caea6e6ed891
SHA1
7a7a238ee5d3843074576beaef2449cbabb8ab2a
SHA256
db4b38770d64508a1916f774a590fa72d88563027cb9c7d29a2068aa307af6c0
SHA512
b2dbf34338ecdcdb9dd5cefc8c681ee1bc29c625dbc6eae46145c62e80da0f564865076d52aacaa4889474b276f51a44786778842986809c025d1e9b1c86a13f
SSDEEP
768:7aLVv9mZ2pkavz6gWzO2Dkhdi2mAC6pJ0YtRgLa1NP:soFY6FkPi7YxULav
Checks for missing Authenticode signature.
resource |
---|
5d31f1a04a701e717f92caea6e6ed891_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetLastError
CreateMutexA
VirtualAlloc
GetWindowsDirectoryA
GetLocalTime
CreateThread
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
WinExec
FindWindowExA
TranslateMessage
GetMessageA
RegisterClassExA
DefWindowProcA
PostMessageA
DispatchMessageA
UnhookWindowsHookEx
SetWindowsHookExA
KillTimer
SetTimer
CallNextHookEx
CreateWindowExA
ShowWindow
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InternetSetOptionA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenA
_stricmp
_initterm
free
_pctype
strchr
fopen
fwrite
fclose
strrchr
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_except_handler3
sprintf
_adjust_fdiv
malloc
SHGetValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ