DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OPiGpAKLbcrUQQ
Static task
static1
Behavioral task
behavioral1
Sample
ff0287ab46048eece959cb24ee73af4c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff0287ab46048eece959cb24ee73af4c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
ff0287ab46048eece959cb24ee73af4c_JaffaCakes118
Size
44KB
MD5
ff0287ab46048eece959cb24ee73af4c
SHA1
0dc2f9b09a6967cf87266e661b249d1bf5449eee
SHA256
3f411b59a33a9c0f4a3c4da65c0653325fa84f5878866289979e8d8683a2fbef
SHA512
83d0fc0bbd5ad8b790724a9e07035b57c8c2ca696d2850c4f6952133609be221e46fdb4d24c6aa5aef06e3c70ab417c99b58b8dbe5cf54320ea85ddb0cce2226
SSDEEP
768:5PHKdc4QsX/v/x9L9uq68pkavAkwvBXRz+pmBgLa1:5DI/zLyrRlUtLa
Checks for missing Authenticode signature.
resource |
---|
ff0287ab46048eece959cb24ee73af4c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetModuleHandleA
GetCommandLineA
FreeLibrary
CreateProcessA
GetModuleFileNameA
GetLastError
GetSystemDirectoryA
CreateThread
VirtualAlloc
InterlockedIncrement
GetProcAddress
GetWindowsDirectoryA
WinExec
GetLocalTime
LoadLibraryA
CreateMutexA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
ShowWindow
KillTimer
SetTimer
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
UnhookWindowsHookEx
FindWindowExA
PostMessageA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
free
strrchr
_except_handler3
__CxxFrameHandler
_stricmp
_initterm
malloc
_adjust_fdiv
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
fclose
fwrite
fopen
strchr
isgraph
isdigit
div
ceil
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OPiGpAKLbcrUQQ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ