CreateConnector
DllCanUnloadNow
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0c3b9ad751d9379707a5a5612337e49a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c3b9ad751d9379707a5a5612337e49a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0c3b9ad751d9379707a5a5612337e49a_JaffaCakes118
Size
76KB
MD5
0c3b9ad751d9379707a5a5612337e49a
SHA1
29d75e73ee76b5c76fc6a5be5a2041dd0b1ed9e3
SHA256
033be3f3bcd2a975786b910f8297cc65a52c010e4786afba8bd5bbee205bd6fd
SHA512
e0c39ceddea741d71dc2b94ca3db6faf15db14d3ccb06548889756afc808a3f3ea0cac76594277ab3ad4a78c85c982472ec358f587c7bae4e0e0a9206a6a72e5
SSDEEP
1536:76zN6B0Ek0YjogB8x+I89LTIbGNdsw1NCLL:6NsZk0YjRBwo9PIGNdswGLL
Checks for missing Authenticode signature.
resource |
---|
0c3b9ad751d9379707a5a5612337e49a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
__CxxFrameHandler
_EH_prolog
_purecall
??3@YAXPAX@Z
_strnicmp
wcscmp
_wcsicmp
wcsncmp
iswspace
swprintf
wcsncpy
wcslen
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
_except_handler3
??2@YAPAXI@Z
HttpEndRequestW
InternetConnectW
InternetSetOptionW
InternetCloseHandle
HttpQueryInfoA
HttpSendRequestExW
InternetWriteFile
HttpQueryInfoW
InternetReadFile
HttpOpenRequestW
InternetSetOptionA
InternetCrackUrlW
HttpAddRequestHeadersW
InternetOpenW
CertOpenStore
CertFindCertificateInStore
CertNameToStrW
CertCloseStore
CertFreeCertificateContext
InitializeCriticalSection
InterlockedCompareExchange
WideCharToMultiByte
GetLastError
InterlockedExchange
DeleteCriticalSection
SysFreeString
SysStringLen
SysAllocStringLen
SysAllocString
LoadRegTypeLi
VariantChangeType
VariantClear
SysStringByteLen
VariantInit
CreateConnector
DllCanUnloadNow
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ