DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Install
Start
Static task
static1
Behavioral task
behavioral1
Sample
863bca2955c6b1aa8f271f8e3556911f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
863bca2955c6b1aa8f271f8e3556911f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
863bca2955c6b1aa8f271f8e3556911f_JaffaCakes118
Size
10KB
MD5
863bca2955c6b1aa8f271f8e3556911f
SHA1
a6ef90774ee55783456b66042a16896c8a684f24
SHA256
9a961db78fee8188eccb2523fd3b1edf97ea0fc851452bcb6884446804e1330e
SHA512
d56ad34bf61f7819beb0c650c4d557c18a95d3f60522329e9eee838c04689d094548301414055ea27c7b603f434bc4484eecf78382f7f512f62a879bea8d5a70
SSDEEP
96:gYDYyBucSfZnayog8ALdQdipajIHW8BII4NJX0tfGymxKipntmnwTStf70uOLMGq:g47BuTrv8AhB6e+rXRAipBTAjx56QV
Checks for missing Authenticode signature.
resource |
---|
863bca2955c6b1aa8f271f8e3556911f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
GetWindowsDirectoryA
GetTempPathA
CreateDirectoryA
lstrcpyA
DeleteFileA
CloseHandle
GetLastError
GetSystemDirectoryA
GetModuleFileNameA
CreateDialogParamA
ShowWindow
SetTimer
DispatchMessageA
DefWindowProcA
GetDesktopWindow
IsDialogMessageA
IsWindow
GetMessageA
TranslateMessage
RegCreateKeyExA
RegCloseKey
ShellExecuteA
PathFindExtensionA
PathAppendA
PathAddBackslashA
SHGetValueA
SHSetValueA
SHDeleteKeyA
InternetGetConnectedState
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
SetupIterateCabinetA
free
_adjust_fdiv
malloc
_initterm
memcpy
strstr
fread
_stricmp
srand
memset
fopen
strlen
fwrite
fclose
strncpy
rand
sprintf
_snprintf
time
strncat
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Install
Start
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ