DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c0304df8e78158b358dad2cb8d615635_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c0304df8e78158b358dad2cb8d615635_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c0304df8e78158b358dad2cb8d615635_JaffaCakes118
Size
44KB
MD5
c0304df8e78158b358dad2cb8d615635
SHA1
af3396a95b0f73cfb00029acefcd1208183cb76c
SHA256
e10972dd503fb2eb215eb4f5319d11f2c12514121016fe75c3eb4aa39264ef30
SHA512
a16a9258db0295f203bf83be2179da8fe2e5c822ce6d6f09c123bcac99e97a494029340ec39ffcc23d6b2d20db0ff0ef120e22712e00b37f3755e581723d99ee
SSDEEP
768:TapkavaSoNSL11FF2BR6ZLrYhadgLa1l4:TJPSh1FF2Tc4aqLaL4
Checks for missing Authenticode signature.
resource |
---|
c0304df8e78158b358dad2cb8d615635_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
GetProcAddress
LoadLibraryA
CreateProcessA
GetModuleFileNameA
CreateThread
GetLastError
CreateMutexA
InterlockedIncrement
CloseHandle
GetSystemDirectoryA
GetWindowsDirectoryA
WinExec
GetLocalTime
PostMessageA
FindWindowExA
DefWindowProcA
RegisterClassExA
DispatchMessageA
TranslateMessage
KillTimer
SetTimer
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
CreateWindowExA
ShowWindow
GetMessageA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
SHGetValueA
__CxxFrameHandler
_adjust_fdiv
malloc
_initterm
free
strrchr
_except_handler3
strchr
fopen
fwrite
fclose
_stricmp
sprintf
??2@YAPAXI@Z
atoi
??3@YAXPAX@Z
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ