CRZZr
DllRegisterServer
DllUnregisterServer
FOtwIxk
QCdGwUeJzUoThNc
Static task
static1
Behavioral task
behavioral1
Sample
008567f28db5835c3f8ce9c2ff18dee0_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
008567f28db5835c3f8ce9c2ff18dee0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
008567f28db5835c3f8ce9c2ff18dee0_JaffaCakes118
Size
36KB
MD5
008567f28db5835c3f8ce9c2ff18dee0
SHA1
1645e92209303f66573cc2d208423267d555e208
SHA256
65d6fe0f9dbf770a18bfd874a6935c8eb7afeefe42b78020c9946049221bd131
SHA512
97741780e41ed78a01d315222f76a055a5ee12ba3239b1c93654605b183b36a677cbfa23cd4caa6b705cc386b6d654ce069bcccb14a02dcd8a90b6cf042edb1d
SSDEEP
384:vVwdONyntrc/9JLTgBSQE8XTdWG6KRQjPzWNpC:vVwdznO/9JLTnQE8XZp6KRQjP
Checks for missing Authenticode signature.
resource |
---|
008567f28db5835c3f8ce9c2ff18dee0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowsDirectoryA
InterlockedIncrement
CloseHandle
GetSystemDirectoryA
GetModuleFileNameA
DeleteFileA
GetLocalTime
LoadLibraryA
WritePrivateProfileStringA
GetProcAddress
DefWindowProcA
PostMessageA
KillTimer
SetTimer
CallNextHookEx
FindWindowExA
CreateWindowExA
ShowWindow
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
rand
_strlwr
_adjust_fdiv
malloc
_initterm
free
strrchr
??2@YAPAXI@Z
strchr
fopen
??3@YAXPAX@Z
strstr
_access
sprintf
_stricmp
__CxxFrameHandler
fclose
fwrite
CRZZr
DllRegisterServer
DllUnregisterServer
FOtwIxk
QCdGwUeJzUoThNc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ