DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6146a11c9264afb2066a438d7807714c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6146a11c9264afb2066a438d7807714c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6146a11c9264afb2066a438d7807714c_JaffaCakes118
Size
44KB
MD5
6146a11c9264afb2066a438d7807714c
SHA1
bda435b06edb8120caae17ad78ca231b71569df2
SHA256
a5d4effc451fd13eb289bf4defba403da98743c242cee82e163b2f679080138d
SHA512
4826d0ba0b7c280b64af5c4cee2d2d23d87f3080a462924dbe06d098f169cb89afbf010a0d3fcd7868c4350124b33d65ed660ccd7944e12ed41e3194169e2a99
SSDEEP
768:c/xDs6/JjKfcE9epkav8zi56nqL3oGQ7QIngLa1ss:iFRKrhzi56nqMGQk1Laa
Checks for missing Authenticode signature.
resource |
---|
6146a11c9264afb2066a438d7807714c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CreateThread
VirtualAlloc
CreateMutexA
CreateProcessA
GetSystemDirectoryA
GetWindowsDirectoryA
WinExec
CloseHandle
GetLocalTime
GetLastError
UnhookWindowsHookEx
RegisterClassExA
ShowWindow
CreateWindowExA
DispatchMessageA
TranslateMessage
KillTimer
SetTimer
SetWindowsHookExA
CallNextHookEx
FindWindowExA
PostMessageA
DefWindowProcA
GetMessageA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
SHGetValueA
atoi
_adjust_fdiv
malloc
_initterm
free
_except_handler3
strrchr
strchr
fopen
fwrite
fclose
_stricmp
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
__CxxFrameHandler
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ