DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7639ff951a6f9943dcd83fef43fce0a5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7639ff951a6f9943dcd83fef43fce0a5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
7639ff951a6f9943dcd83fef43fce0a5_JaffaCakes118
Size
44KB
MD5
7639ff951a6f9943dcd83fef43fce0a5
SHA1
5fae4cfea0739efeb0f33287eec518f2080839b0
SHA256
c63b91234cb4cf38382abe8b6040b91926f31a540de5c8f6fcfa4e8680453ad4
SHA512
ef50282907ca9744531352e896cdec6e38d870b43f81b74f07dd6fd9dea836a90042008a8572926b1011f36fa39f43bee6c7a6f3f4b7b10bb7a423b148d32e16
SSDEEP
384:5bFzOvZaBnQmQCs0Dtkav5BZEHz0ZxHOWOsT5G1ShKdJpJgLa0Mpk:zvjQCtpkav/2OkWD5kSh8gLa1m
Checks for missing Authenticode signature.
resource |
---|
7639ff951a6f9943dcd83fef43fce0a5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLocalTime
CreateThread
VirtualAlloc
GetProcAddress
LoadLibraryA
CreateMutexA
CreateProcessA
GetModuleFileNameA
InterlockedIncrement
GetLastError
CloseHandle
GetSystemDirectoryA
GetWindowsDirectoryA
WinExec
UnhookWindowsHookEx
DispatchMessageA
TranslateMessage
GetMessageA
RegisterClassExA
PostMessageA
CallNextHookEx
SetTimer
KillTimer
CreateWindowExA
ShowWindow
SetWindowsHookExA
DefWindowProcA
FindWindowExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SHGetValueA
strchr
_adjust_fdiv
malloc
_initterm
free
atoi
strrchr
_except_handler3
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_stricmp
sprintf
fopen
fclose
fwrite
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ