?duier@@YAHXZ
?glopiq@@YAHXZ
?jpqdr@@YAHXZ
DllRegisterServer
PluginInit
Static task
static1
Behavioral task
behavioral1
Sample
f35e0210905faf97ffaf574870eae764_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f35e0210905faf97ffaf574870eae764_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f35e0210905faf97ffaf574870eae764_JaffaCakes118
Size
294KB
MD5
f35e0210905faf97ffaf574870eae764
SHA1
4e9f5b3a4d354b8c0cbdaaf4eef419511fe2beec
SHA256
07e6e23e6f347e83b64585bfcf14158dfffe42d20e577e41b55ac9423f0ccef6
SHA512
fe57e9ed5f2f7a09935e672f0db82651a548ada5e4ece27726be8f0d9cfc5d9ffe57e401c10c40919cd83e7e06d34b0181ceecb522b851d407fa399f55da5b55
SSDEEP
3072:7nm/lcz0nUFsV9MZ/5Mdjr85R78dnrD6KM69pzy3nJVV0GS4NXfXyWDotUKrR:Tz0nUFsV6Z/2ZwR7chpCJV/iSarR
Checks for missing Authenticode signature.
resource |
---|
f35e0210905faf97ffaf574870eae764_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
StrStrA
GetCurrentThreadId
VirtualAlloc
GetProcAddress
LoadLibraryA
GetCurrentProcessId
VirtualFree
GetClientRect
?duier@@YAHXZ
?glopiq@@YAHXZ
?jpqdr@@YAHXZ
DllRegisterServer
PluginInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ