Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
Start
Static task
static1
Behavioral task
behavioral1
Sample
3d98c94194d7ee1fe6eba1f03fd7a391_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3d98c94194d7ee1fe6eba1f03fd7a391_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3d98c94194d7ee1fe6eba1f03fd7a391_JaffaCakes118
Size
27KB
MD5
3d98c94194d7ee1fe6eba1f03fd7a391
SHA1
8e1b01ccbd3051d2629dada5d3fa698a1d25f4a0
SHA256
c5e83e4ce9f000a231d6ea6da3f44d724c8d721421d3b7a593c47bec5b50a20c
SHA512
35d57ce391b272bd98442ae89804c1c89e86065c491cdc0d1a9dc624029a97a5487a7f2c5191d220b01af47f64cc80b9380a101806b791051bed8f0fc2b15baf
SSDEEP
768:TaNL35f5TQMtPuNtogNjLVbP0Ell2TThdB:TqL5f50WOzZcE3Y1
Checks for missing Authenticode signature.
resource |
---|
3d98c94194d7ee1fe6eba1f03fd7a391_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrRChrA
StrStrA
PathFileExistsA
StrChrA
SHDeleteKeyA
StrCmpNIA
StrStrIA
InternetQueryOptionA
InternetSetOptionA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetGetCookieA
HttpQueryInfoA
WSAStartup
gethostbyaddr
WSACleanup
GetIpAddrTable
GetIfEntry
lstrlenA
Process32Next
LocalAlloc
OpenSemaphoreA
CreateToolhelp32Snapshot
Process32First
OpenProcess
SetEvent
CreateEventA
InterlockedIncrement
InterlockedDecrement
GetVolumeInformationA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
VirtualAlloc
VirtualFree
GetLastError
Sleep
SystemTimeToFileTime
GetSystemTime
GetVersionExA
lstrcmpiA
GetModuleFileNameA
ExitProcess
MoveFileA
GetTickCount
GetTempPathA
CreateProcessA
FreeLibrary
WaitForSingleObject
GetProcAddress
LoadLibraryA
CopyFileA
GetSystemDirectoryA
lstrcatA
ReleaseMutex
CreateMutexA
TerminateThread
GetFileSize
WriteFile
FindClose
DeleteFileA
SetFileAttributesA
FindFirstFileA
lstrcpyA
OpenMutexA
FileTimeToSystemTime
GetFileTime
FreeLibraryAndExitThread
ResetEvent
CreateThread
LocalFree
SetEndOfFile
GetWindowsDirectoryA
CreateDirectoryA
lstrcpynA
TerminateProcess
UnhookWindowsHookEx
SetWindowsHookExA
DefWindowProcA
DispatchMessageA
TranslateMessage
PeekMessageA
SetWindowLongA
CallNextHookEx
wsprintfA
CreateWindowExA
SetSecurityInfo
RegFlushKey
RegDeleteKeyA
SetNamedSecurityInfoA
SetEntriesInAclA
GetSecurityInfo
AllocateAndInitializeSid
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
ShellExecuteA
Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE