DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
648321135318ef0626cf6593ff2cd840_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
648321135318ef0626cf6593ff2cd840_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
648321135318ef0626cf6593ff2cd840_JaffaCakes118
Size
44KB
MD5
648321135318ef0626cf6593ff2cd840
SHA1
160c7620bc335a5284c7d74063becce843d54640
SHA256
f1d1c4116ee805c1700e59697998a1bf566a3560fdbd97ecd770071bf2eb22c1
SHA512
262d0f734d24546bd92b43d9132c34c829cabdd6144f549af01398832743c10cc9e5dc1ee0410ab01a6a43108f1d40089e32bd64a9fcac9dd43e70d04aecb70e
SSDEEP
768:qKCAuO6Dp3FNI3+qtxuFqdsFSzpkavqMKhKgLa1UQ:qjAu9VFNI3+qfu8dMFZFLa
Checks for missing Authenticode signature.
resource |
---|
648321135318ef0626cf6593ff2cd840_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
CloseHandle
GetModuleFileNameA
InterlockedIncrement
CreateThread
GetWindowsDirectoryA
GetProcAddress
CreateMutexA
VirtualAlloc
CreateProcessA
WinExec
GetLocalTime
GetLastError
LoadLibraryA
CreateWindowExA
DefWindowProcA
PostMessageA
FindWindowExA
ShowWindow
SetTimer
SetWindowsHookExA
RegisterClassExA
CallNextHookEx
GetMessageA
TranslateMessage
KillTimer
UnhookWindowsHookEx
DispatchMessageA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
??2@YAPAXI@Z
_adjust_fdiv
malloc
_initterm
free
_except_handler3
atoi
__CxxFrameHandler
strrchr
_stricmp
??3@YAXPAX@Z
strchr
fclose
fwrite
fopen
sprintf
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ