DllRegisterServer
DllUnregisterServer
PauseW
ResumeW
StartW
YjnhqbmqgotmtPehoolinfwuqypj
Static task
static1
Behavioral task
behavioral1
Sample
e82f365f5d09eeb446ea1a36cc7b94ad_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e82f365f5d09eeb446ea1a36cc7b94ad_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e82f365f5d09eeb446ea1a36cc7b94ad_JaffaCakes118
Size
475KB
MD5
e82f365f5d09eeb446ea1a36cc7b94ad
SHA1
3e2ea5e79c659cb9684adf2f1d5c596401f3f456
SHA256
f918c0b06f05299d775b65e211351fa2533cf88ad0fd39ef2705eef91d804231
SHA512
4a74e71b4a9c4a357c7f6061d6a3a223b23b8041f3d412705bb6517542e72d729683b1c16180ea33f8e66590107b028ee2c346323fbda21501d6cffa4df52849
SSDEEP
12288:ZYcE+K1+0qWIo0AAZVOCjsvXWl2/1b/lDEZGtCzCUp02pkyxo++D6YX7S4qfo5xS:N/lI+ivUg6
Checks for missing Authenticode signature.
resource |
---|
e82f365f5d09eeb446ea1a36cc7b94ad_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetThreadPriority
TlsGetValue
WaitForSingleObject
WaitForMultipleObjects
CreateThread
CreateFileA
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
GetSystemTime
DllRegisterServer
DllUnregisterServer
PauseW
ResumeW
StartW
YjnhqbmqgotmtPehoolinfwuqypj
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE