DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
30981cf8c0e57ff034ad8d164b8c8c32_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
30981cf8c0e57ff034ad8d164b8c8c32_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
30981cf8c0e57ff034ad8d164b8c8c32_JaffaCakes118
Size
44KB
MD5
30981cf8c0e57ff034ad8d164b8c8c32
SHA1
50e951ce0966959524af194f37256d92c7fa7d9a
SHA256
f2941431ae1cae7783312312fd9d37ff73231e423259676d6da07241172d7b59
SHA512
e86c1a3d5767dc211315574ea23a1bf676c1ddaea694fccc5d5146a77a2eb26c8a4316cebe1392aedeb6a7ea1f50e9d4c206b609d5b49588f3dbf54c95def02f
SSDEEP
768:1mBMDjNkGpkavibzkMlX6pIKC1jLaYv+K8+qgLa1c:1mBeGh1QpIKksxgLa
Checks for missing Authenticode signature.
resource |
---|
30981cf8c0e57ff034ad8d164b8c8c32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CreateMutexA
GetLocalTime
GetProcAddress
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
CreateProcessA
VirtualAlloc
GetModuleFileNameA
LoadLibraryA
CreateThread
CloseHandle
InterlockedIncrement
DefWindowProcA
RegisterClassExA
DispatchMessageA
TranslateMessage
FindWindowExA
ShowWindow
KillTimer
SetTimer
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
PostMessageA
GetMessageA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
fopen
_adjust_fdiv
malloc
_initterm
free
_pctype
??2@YAPAXI@Z
??3@YAXPAX@Z
strchr
_stricmp
fwrite
fclose
sprintf
__CxxFrameHandler
_except_handler3
strrchr
SHGetValueA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ