?duier@@YAHXZ
?glopiq@@YAHXZ
?jpqdr@@YAHXZ
DllRegisterServer
PluginInit
Static task
static1
Behavioral task
behavioral1
Sample
f16a5b067a571ecf346d682381a8791f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f16a5b067a571ecf346d682381a8791f_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f16a5b067a571ecf346d682381a8791f_JaffaCakes118
Size
312KB
MD5
f16a5b067a571ecf346d682381a8791f
SHA1
635fe9ad51c312b9f628df00698fa15b11e1ac74
SHA256
3af7c38683059ac93285799263fbd1d09ed3c7480d7e2c0b0b8c00defb795eac
SHA512
896e9cd5f5802b5d451f4756b786db7dfa17cf53a972be30b47fc3a07763367842b5cfa9e1decadca5a775b5e6229c7cf4b6e27856ab0562ee629d2e934686d3
SSDEEP
6144:06/nNxMpma9+w/1X2FI+uMYzuAN6Ud9blCGzrnmn9eRZEOYsnTCu2H7ByBnqgk3Z:0enNxMpma9+w/1X2FI+uMYzuAN6Ud9bg
Checks for missing Authenticode signature.
Processes:
resource |
---|
f16a5b067a571ecf346d682381a8791f_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
StrStrA
GetCurrentThreadId
VirtualAlloc
GetProcAddress
LoadLibraryA
GetCurrentProcessId
VirtualFree
GetClientRect
?duier@@YAHXZ
?glopiq@@YAHXZ
?jpqdr@@YAHXZ
DllRegisterServer
PluginInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ