DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b98a5a771cd3647f0bcf5c57556e148e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b98a5a771cd3647f0bcf5c57556e148e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b98a5a771cd3647f0bcf5c57556e148e_JaffaCakes118
Size
44KB
MD5
b98a5a771cd3647f0bcf5c57556e148e
SHA1
2ceb99f85f55ec728036cb0eb8272a74a42b8c3c
SHA256
caf24171c4647a8e93c6cc477e70056c2b80e20f62916917cb222e2a27c8ddcb
SHA512
27570bf4243b660c97c48607c9ada0033d9f2d3511046f2098b631a32d1671efe6512a2b0676703f5766bfd836c9ad784c25749617af0b66643933713bc37cb6
SSDEEP
768:k4MBEy5XXJTpkavEGIsNBR98Y1Aw09JdU0dHgLa13:keyBwWIkBb8x6vLaJ
Checks for missing Authenticode signature.
resource |
---|
b98a5a771cd3647f0bcf5c57556e148e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CreateMutexA
GetProcAddress
GetWindowsDirectoryA
CreateThread
VirtualAlloc
GetLocalTime
InterlockedIncrement
WinExec
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
LoadLibraryA
ShowWindow
CreateWindowExA
PostMessageA
FindWindowExA
SetWindowsHookExA
DispatchMessageA
RegisterClassExA
UnhookWindowsHookEx
SetTimer
KillTimer
DefWindowProcA
CallNextHookEx
GetMessageA
TranslateMessage
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
SHGetValueA
strchr
_adjust_fdiv
malloc
_initterm
free
strrchr
atoi
_except_handler3
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_stricmp
fopen
fwrite
sprintf
fclose
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ