DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
01df2c53b876b059ad957d2524da8d58_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01df2c53b876b059ad957d2524da8d58_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
01df2c53b876b059ad957d2524da8d58_JaffaCakes118
Size
40KB
MD5
01df2c53b876b059ad957d2524da8d58
SHA1
3b20d0dcb691d73433609a18d1fa49038939c0e1
SHA256
c0bf06a91c44f0c58576d33c85a1cb76d5f5e38ff5fcad22f7efb468e648606d
SHA512
03978ae0a223ef00723710bdf1abc2c23ca0ad6b02b995205e95a83819ae46ede6e11bbd35d62d8da04ba5ffb409404d934c76432ac4341aecc9aeaa3b5ade02
SSDEEP
768:S5/Kp0Is86sCk9U+pkavp6D/kumlT6gLa1At8efM:SCEiUNSZnLaWt10
Checks for missing Authenticode signature.
resource |
---|
01df2c53b876b059ad957d2524da8d58_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
InterlockedIncrement
CreateProcessA
LoadLibraryA
CreateThread
VirtualAlloc
WinExec
GetWindowsDirectoryA
GetProcAddress
GetLocalTime
CreateMutexA
GetLastError
CloseHandle
GetSystemDirectoryA
FindWindowExA
UnhookWindowsHookEx
ShowWindow
CreateWindowExA
PostMessageA
SetTimer
SetWindowsHookExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
DefWindowProcA
CallNextHookEx
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
_except_handler3
_adjust_fdiv
malloc
_initterm
free
strchr
fopen
fwrite
fclose
_stricmp
strrchr
??2@YAPAXI@Z
sprintf
__CxxFrameHandler
_pctype
??3@YAXPAX@Z
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ