DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
26a402ef63ef8f5398f4b94ac9cf0c6d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
26a402ef63ef8f5398f4b94ac9cf0c6d_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
26a402ef63ef8f5398f4b94ac9cf0c6d_JaffaCakes118
Size
32KB
MD5
26a402ef63ef8f5398f4b94ac9cf0c6d
SHA1
cce33b2adc227528daa06417500317360e70fd85
SHA256
05c8073add4027ddb0d71404f4e7e3aaa4e10286a08dd08fd41ff766f5207fd3
SHA512
d944c7cad53a3b4ab773132783505e1f7a83387b9a5cbe0fcb03ae3608bfde40d16d8ef88e19b6b6cb126c8db720ef3882e1ab7f502732bad192cedb568f2e0d
SSDEEP
384:T/3ADPoLGYBwXWM7I+2uBBQARQkppd0ZIr0l8uC0Z:LA19N7PBBBQARQkppdjr0l
Checks for missing Authenticode signature.
resource |
---|
26a402ef63ef8f5398f4b94ac9cf0c6d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
SetEvent
OpenEventA
CreateEventA
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
WinExec
VirtualAlloc
lstrcatA
VirtualProtect
CreateThread
GetCurrentDirectoryA
GetPrivateProfileStringA
GetModuleHandleA
LoadLibraryA
GetProcAddress
IsBadReadPtr
Sleep
InitializeCriticalSection
lstrlenA
wsprintfA
CallNextHookEx
SetWindowsHookExA
KillTimer
SetTimer
RegSetValueExA
RegOpenKeyA
RegCloseKey
SysStringLen
SysFreeString
LoadRegTypeLi
ord16
ord21
ord15
ord18
ord57
ord32
ord58
ord30
ord23
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
closesocket
_initterm
_strcmpi
malloc
_adjust_fdiv
_itoa
_strlwr
free
??2@YAPAXI@Z
_purecall
strrchr
strstr
memcpy
strcpy
strcat
memset
memcmp
strcmp
strlen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ