DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ddfc0926df16c7d8958dbf34a51e93bd_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ddfc0926df16c7d8958dbf34a51e93bd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ddfc0926df16c7d8958dbf34a51e93bd_JaffaCakes118
Size
44KB
MD5
ddfc0926df16c7d8958dbf34a51e93bd
SHA1
6d340657b987002ccbaa77a33ef68b2dd6503483
SHA256
5db7d9b91b61e2951a9a84b3c8bb82f9454947bc334997129e47009fc2cd318b
SHA512
bbc9fc51da059ff8371bf57a0ae8e65cece3918f7afb23103b83ad8d25e410331021625b62903199c5b353675f697baa4157865f3b85f0ed27dcd5680b75487f
SSDEEP
768:U7JTTlpkavxrEoFKo3YI+fr7KplpJv6+vh8t1ZHCugLa1:U7JfMZoF1oI+jmJv9pMTCLLa
Checks for missing Authenticode signature.
resource |
---|
ddfc0926df16c7d8958dbf34a51e93bd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
InterlockedIncrement
CreateProcessA
GetSystemDirectoryA
GetLocalTime
GetLastError
CreateMutexA
WinExec
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
VirtualAlloc
CreateThread
CloseHandle
CreateWindowExA
DefWindowProcA
PostMessageA
FindWindowExA
ShowWindow
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowsHookExA
KillTimer
UnhookWindowsHookEx
RegisterClassExA
SetTimer
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
strrchr
_adjust_fdiv
malloc
_initterm
free
strchr
fopen
fwrite
fclose
_stricmp
atoi
??2@YAPAXI@Z
sprintf
__CxxFrameHandler
_except_handler3
??3@YAXPAX@Z
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ