DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b90f069a1fdaab70d724b1ee609e207f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b90f069a1fdaab70d724b1ee609e207f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b90f069a1fdaab70d724b1ee609e207f_JaffaCakes118
Size
40KB
MD5
b90f069a1fdaab70d724b1ee609e207f
SHA1
f573973138f2b67369bf30439ae45081ff7c4445
SHA256
3aa489bbf17aab59af91fe813df2497d106fe116aebeac2b8e80326eb3cc65fd
SHA512
8362373a887fa6f0274e4fd91703707bbd7e282a767ccb12120635f0f095b64f1286d19bba77cc3b522d1babd16c29e4d9d301c30134d197d9359d79acb9ddc2
SSDEEP
768:/rh0zw8wOFRpHxjpkavEXx9XKk1BgLa15w/:/0wMHwl9z1uLa4
Checks for missing Authenticode signature.
resource |
---|
b90f069a1fdaab70d724b1ee609e207f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLocalTime
GetLastError
CreateMutexA
InterlockedIncrement
CreateThread
GetWindowsDirectoryA
GetProcAddress
LoadLibraryA
WinExec
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
VirtualAlloc
FindWindowExA
DispatchMessageA
TranslateMessage
GetMessageA
PostMessageA
SetWindowsHookExA
CreateWindowExA
ShowWindow
CallNextHookEx
KillTimer
SetTimer
RegisterClassExA
DefWindowProcA
UnhookWindowsHookEx
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
??3@YAXPAX@Z
_adjust_fdiv
malloc
_initterm
free
_except_handler3
strrchr
_pctype
??2@YAPAXI@Z
_stricmp
strchr
fopen
sprintf
__CxxFrameHandler
fclose
fwrite
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ