DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2edfcabd9bda83002b30f4a39bc80606_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2edfcabd9bda83002b30f4a39bc80606_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2edfcabd9bda83002b30f4a39bc80606_JaffaCakes118
Size
44KB
MD5
2edfcabd9bda83002b30f4a39bc80606
SHA1
c95e4345c0fd44f9e9a96d7b328cca7bd6b74254
SHA256
ca29c5af16822189c9f2615e37be758a67e2014428574f8f521a1fe9d0fb791e
SHA512
0794d5e0be67ab8058d583599423a3d18c6a7c79af87dd4247f13405201aa4495ea1a8bbcdb65bcdd312ec9791a8bd0d012f6a99a77543e74934dd28bb91248e
SSDEEP
768:XlKZYp6eougj4/94JS0DdBXetxHn7pkavB2IF+xGsngLa1lk:V4YERj4V4JS0rXOH+2eYJLav
Checks for missing Authenticode signature.
resource |
---|
2edfcabd9bda83002b30f4a39bc80606_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowsDirectoryA
GetSystemDirectoryA
CreateThread
LoadLibraryA
GetModuleFileNameA
WinExec
CreateProcessA
VirtualAlloc
CreateMutexA
InterlockedIncrement
GetLastError
GetLocalTime
CloseHandle
GetProcAddress
GetMessageA
RegisterClassExA
ShowWindow
CreateWindowExA
TranslateMessage
FindWindowExA
PostMessageA
SetWindowsHookExA
UnhookWindowsHookEx
KillTimer
SetTimer
CallNextHookEx
DispatchMessageA
DefWindowProcA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
fwrite
_adjust_fdiv
malloc
_initterm
free
strrchr
_except_handler3
strchr
fopen
_stricmp
fclose
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
atoi
sprintf
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ