DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a7a1f8b7534df0286c5791fc3fbf53c3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a7a1f8b7534df0286c5791fc3fbf53c3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a7a1f8b7534df0286c5791fc3fbf53c3_JaffaCakes118
Size
44KB
MD5
a7a1f8b7534df0286c5791fc3fbf53c3
SHA1
5665ebbc89140f723f503a4ed8dd7caaeea2c5c1
SHA256
df5e20de4f8a70ed685b6b002380ac38996b5b7d4117bf381b991add4d9f94bb
SHA512
27f2dc3904f51982892c9831e96837688fac1456d4e907a90336fbf7310cefc6a44183fdd4ca3e5c77ada156a80f5763c2e8e9fe0bd24025511e91c082bd9d15
SSDEEP
384:HZMegZevb2DRT5Y6SDtkav5yBwlruhYl5HQe8Zog6UuOHVwHcTSJpJgLa0MpEu:P42SRVYNpkavXlr1lj8xjHV9CgLa1
Checks for missing Authenticode signature.
resource |
---|
a7a1f8b7534df0286c5791fc3fbf53c3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CreateMutexA
CreateThread
GetModuleFileNameA
VirtualAlloc
CloseHandle
CreateProcessA
GetLocalTime
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
GetWindowsDirectoryA
WinExec
InterlockedIncrement
ShowWindow
CreateWindowExA
UnhookWindowsHookEx
DispatchMessageA
FindWindowExA
KillTimer
SetTimer
CallNextHookEx
RegisterClassExA
DefWindowProcA
GetMessageA
SetWindowsHookExA
PostMessageA
TranslateMessage
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
fopen
_adjust_fdiv
malloc
_initterm
free
atoi
strrchr
_except_handler3
strchr
_stricmp
fwrite
fclose
sprintf
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ