DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
jzaAUGrkpTGIvu
Static task
static1
Behavioral task
behavioral1
Sample
f8dc9d00a8ba80cd0b9c7313d39f8a55_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8dc9d00a8ba80cd0b9c7313d39f8a55_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f8dc9d00a8ba80cd0b9c7313d39f8a55_JaffaCakes118
Size
44KB
MD5
f8dc9d00a8ba80cd0b9c7313d39f8a55
SHA1
f09fa7aea4d65ff96d53b7dcf89cd399786290ad
SHA256
6674e72284a9105e91d7760340729bc159931dec52abb1e75a4c53d90ba61cf7
SHA512
20741599ebcf4c5fa5f53160983db7a3950f10321de725557e8e4a7bcfee18bde6fc8d794573e1ca7fd29ca6b6c0cf71f4335280d321c83e1c75b747d2042d82
SSDEEP
768:GQqmcEU3H1eEvwpkav5cXtXdH2IrCfVgdgLa1+GDC:UFea+EtLrCtgqLaYGDC
Checks for missing Authenticode signature.
resource |
---|
f8dc9d00a8ba80cd0b9c7313d39f8a55_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
GetModuleFileNameA
GetSystemDirectoryA
CreateThread
WinExec
GetLocalTime
GetCommandLineA
FreeLibrary
InterlockedIncrement
VirtualAlloc
CreateMutexA
GetProcAddress
GetLastError
CloseHandle
LoadLibraryA
GetWindowsDirectoryA
KillTimer
SetTimer
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
FindWindowExA
PostMessageA
CreateWindowExA
ShowWindow
RegisterClassExA
SetWindowsHookExA
UnhookWindowsHookEx
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
_except_handler3
strrchr
strchr
_stricmp
fopen
fwrite
fclose
__CxxFrameHandler
_initterm
malloc
_adjust_fdiv
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
jzaAUGrkpTGIvu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ