DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
619e5680051b5bb227ababcb348f5110_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
619e5680051b5bb227ababcb348f5110_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
619e5680051b5bb227ababcb348f5110_JaffaCakes118
Size
48KB
MD5
619e5680051b5bb227ababcb348f5110
SHA1
1be6afe335274eeac5731471884ffb472eba255a
SHA256
1e3e1076a19eead6ee0252c4ee9ce20134d58e94fb978144bcd63d2a01689c0c
SHA512
11abaa09dbec1b0662b7f2eb18806e299e3f099c93eaffcab0cc0624b21924bf28768fa3a0e73c1c38f819f1bf5cd9ac186a841c38e1847f2e3c033989bb7593
SSDEEP
768:5Os7aTw6EjpkavXwlPo5N6g9buIgLa1E5K:a5FU0gZOLa0
Checks for missing Authenticode signature.
resource |
---|
619e5680051b5bb227ababcb348f5110_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
CreateThread
WinExec
GetWindowsDirectoryA
GetLocalTime
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
InterlockedIncrement
SetWindowsHookExA
RegisterClassExA
UnhookWindowsHookEx
DispatchMessageA
CreateWindowExA
SetTimer
DefWindowProcA
CallNextHookEx
FindWindowExA
PostMessageA
GetMessageA
KillTimer
ShowWindow
TranslateMessage
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
strrchr
_adjust_fdiv
malloc
_initterm
free
strchr
fopen
fwrite
fclose
_stricmp
_except_handler3
_pctype
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
__CxxFrameHandler
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ