DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FVrEJHz
Static task
static1
Behavioral task
behavioral1
Sample
0233f518047fda919d6ebffa855e5466_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0233f518047fda919d6ebffa855e5466_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0233f518047fda919d6ebffa855e5466_JaffaCakes118
Size
40KB
MD5
0233f518047fda919d6ebffa855e5466
SHA1
16741f96723f0be7ce671b3513db342386570ce0
SHA256
04a58bc93d28a4e395d1c4709c54d90d53b622b2a8b7748636575ed9b90003fb
SHA512
f2be67247e67fb9d21733d3a6a540f14ddceecbf781ad5fd35481053cfecedaa39370801e218ad198e11c6870023aad03e20962b90710b1bba480dae6d8bc83f
SSDEEP
768:NOGz720xpkavEO4inVxSkr8hP5WgLa1uQ5r:i3X8wVpLaVr
Checks for missing Authenticode signature.
resource |
---|
0233f518047fda919d6ebffa855e5466_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
CreateProcessA
GetSystemDirectoryA
GetModuleHandleA
GetCommandLineA
GetModuleFileNameA
GetLocalTime
CreateThread
VirtualAlloc
WinExec
GetWindowsDirectoryA
CloseHandle
LoadLibraryA
GetProcAddress
CreateMutexA
GetLastError
FreeLibrary
UnhookWindowsHookEx
SetWindowsHookExA
KillTimer
SetTimer
CallNextHookEx
RegisterClassExA
CreateWindowExA
ShowWindow
FindWindowExA
PostMessageA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
strchr
fopen
fwrite
fclose
_except_handler3
_stricmp
_initterm
malloc
_adjust_fdiv
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
__CxxFrameHandler
strrchr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FVrEJHz
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ