DllRegisterServer
DllUnregisterServer
onLogon
Static task
static1
Behavioral task
behavioral1
Sample
0ae7d476e99b3688aa0a2ebd1930c044_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ae7d476e99b3688aa0a2ebd1930c044_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0ae7d476e99b3688aa0a2ebd1930c044_JaffaCakes118
Size
9KB
MD5
0ae7d476e99b3688aa0a2ebd1930c044
SHA1
42237bd200e798db24adeba0a8bde1d9c754aa3f
SHA256
d31aa5ff25a435ba2a6297f02eb5f37ea1134fcecddd0c8d39ffa2c19f276389
SHA512
d4738cdf001f322e858355f4e7a6058e637a8d80735d40d1e23754a302515bb7fb59e96dc68765c393cce8eb77d1b9fed448e80e762837d7a5eff4358e72a56e
SSDEEP
192:4VOMn3ROZfm0Fy16ZlRWh8yDRJasyrA8y:43n3Rn0o16Zl0h8ydIvy
Checks for missing Authenticode signature.
resource |
---|
0ae7d476e99b3688aa0a2ebd1930c044_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
lstrlenA
GetTickCount
GetSystemDirectoryA
FindFirstFileA
GetLastError
lstrcmpiA
GetModuleHandleA
FindClose
MoveFileA
GetModuleFileNameA
FindNextFileA
DeleteFileA
VirtualProtect
IsBadReadPtr
CopyFileA
VirtualQuery
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
GetForegroundWindow
MessageBoxA
GetSystemMetrics
PathAddBackslashA
PathAppendA
PathRemoveFileSpecA
PathStripPathA
ShellExecuteA
_vsnprintf
memset
_strcmpi
_stricmp
DllRegisterServer
DllUnregisterServer
onLogon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ