DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
073dea5a6d382ead9b34dd6ab43c7eac_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
073dea5a6d382ead9b34dd6ab43c7eac_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
073dea5a6d382ead9b34dd6ab43c7eac_JaffaCakes118
Size
40KB
MD5
073dea5a6d382ead9b34dd6ab43c7eac
SHA1
9de81a13c1afbefdfe24b0401ddbba2f013d6843
SHA256
95cfc28d51699ccdba34af9f3a2db254b35d6446f904eb073910a82bd915e1c2
SHA512
745376a1ba107b55d22f302a1a03c6a3629eb578f5b28360406e1c70a493c8252f746274cbb7c0a4f36588ac305b30afcef3fb4acd5ae1bd824293c7519c451e
SSDEEP
768:J3QzQb7LOPFbdPAVpkavWPhEWK+U3gLa1sJ:dFbnOL4cfmiUwLaY
Checks for missing Authenticode signature.
resource |
---|
073dea5a6d382ead9b34dd6ab43c7eac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
InterlockedIncrement
GetLastError
WinExec
GetLocalTime
CreateProcessA
LoadLibraryA
GetProcAddress
CloseHandle
VirtualAlloc
CreateThread
CreateMutexA
SetWindowsHookExA
UnhookWindowsHookEx
KillTimer
SetTimer
DefWindowProcA
FindWindowExA
PostMessageA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
CallNextHookEx
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
strrchr
__CxxFrameHandler
strchr
sprintf
_stricmp
fopen
fwrite
fclose
_initterm
malloc
_adjust_fdiv
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ