DllMain
Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion
Static task
static1
Behavioral task
behavioral1
Sample
0886b80f8a0a8c4524088b7b22f8c7e0_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0886b80f8a0a8c4524088b7b22f8c7e0_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0886b80f8a0a8c4524088b7b22f8c7e0_JaffaCakes118
Size
28KB
MD5
0886b80f8a0a8c4524088b7b22f8c7e0
SHA1
7e0f58114daefd5510170b858e508c9e144a0bfd
SHA256
19faa5fff1d3e911fe10e2ba4bc7a06ec200a03b1683043a2cc81c8bfa49066d
SHA512
1f4774da20a1ce1e25d579033a73c68c7dc548c66cf53c49ee76e240d62ba976d9837863d4807fefbe50c098815695b81e09b88b4f5c407d76ac0c255e52ea47
SSDEEP
384:wCOakr/tFPecEISvwsDP/xnkcJVqWWIH6WiWIH6WMt0:wOi/tFPe1v7DP/xnkcJVqwIJ
Checks for missing Authenticode signature.
resource |
---|
0886b80f8a0a8c4524088b7b22f8c7e0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wsprintfA
LoadStringA
CharNextA
CharPrevA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
LocalFree
DeleteFileA
lstrcatA
FindClose
lstrcpyA
lstrcpynA
WritePrivateProfileStringA
WideCharToMultiByte
GetFileAttributesA
GetPrivateProfileIntA
FindFirstFileA
lstrcmpiA
lstrlenA
GetPrivateProfileStringA
LocalAlloc
SetFileAttributesA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
SetupFindNextLine
SetupFindFirstLineA
SetupOpenInfFileA
SetupCloseLog
SetupLogErrorA
SetupCloseInfFile
SetupGetLineTextA
SetupOpenLog
DllMain
Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE