DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fd28d80e0bd80bec7675826857742fe6_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd28d80e0bd80bec7675826857742fe6_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fd28d80e0bd80bec7675826857742fe6_JaffaCakes118
Size
48KB
MD5
fd28d80e0bd80bec7675826857742fe6
SHA1
3e630a4587ff1536a9972b44f2353b34046be831
SHA256
16b2910f74beade313f2e2891a10348e1adb6b9f7d51a192a9e0adbaf12134f5
SHA512
a1c4c9bb50cece107dda0b5d5181ecd736419119561c2fefd46f4a66c0de151834f3f6b69ff9786505b995fdc1c91dd397ee88ab61c0e6edba78688773b1d340
SSDEEP
768:PXHthtNg2mm5CdkVkAxZ99nUl5iQ9pkavKfB3gLa1g4jP4V+q:FhtlFH9lUl+npwLad
Checks for missing Authenticode signature.
resource |
---|
fd28d80e0bd80bec7675826857742fe6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
CreateMutexA
WinExec
GetWindowsDirectoryA
CreateThread
GetModuleFileNameA
GetProcAddress
LoadLibraryA
GetLocalTime
InterlockedIncrement
CreateProcessA
GetLastError
CloseHandle
VirtualAlloc
UnhookWindowsHookEx
FindWindowExA
PostMessageA
CreateWindowExA
ShowWindow
CallNextHookEx
KillTimer
SetTimer
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowsHookExA
RegisterClassExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
strrchr
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z
strchr
_stricmp
fopen
fwrite
_initterm
malloc
_adjust_fdiv
sprintf
__CxxFrameHandler
fclose
SHGetValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ