DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kLfSCgr
Static task
static1
Behavioral task
behavioral1
Sample
0c255fc93656d6d7e2e836e56d130b3c_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0c255fc93656d6d7e2e836e56d130b3c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0c255fc93656d6d7e2e836e56d130b3c_JaffaCakes118
Size
44KB
MD5
0c255fc93656d6d7e2e836e56d130b3c
SHA1
12cefab8e22d3cede312aac9f58c623b10e548be
SHA256
94c9c416d09f102b2fd712b9c6c4631f377e120928522c165092e68f6c7ca307
SHA512
a7e64101aa7757d3b7994ecd3710569a1925d65016cd77a58acf11c5821430398439a7dc72741f1c75bdb6739043c0a0a71b706f9505060c24093cb30f3d85f0
SSDEEP
768:hV32yu1jLjj/kNpkavOALRLApXbHj26gLa1:h8v1TT1+0qnLa
Checks for missing Authenticode signature.
resource |
---|
0c255fc93656d6d7e2e836e56d130b3c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
FreeLibrary
GetLocalTime
WinExec
CreateMutexA
GetSystemDirectoryA
InterlockedIncrement
VirtualAlloc
CreateProcessA
GetLastError
CloseHandle
GetModuleFileNameA
LoadLibraryA
CreateThread
GetWindowsDirectoryA
KillTimer
SetTimer
CallNextHookEx
TranslateMessage
DispatchMessageA
UnhookWindowsHookEx
CreateWindowExA
ShowWindow
RegisterClassExA
SetWindowsHookExA
FindWindowExA
PostMessageA
DefWindowProcA
GetMessageA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
_except_handler3
strrchr
strchr
_stricmp
fopen
fwrite
fclose
??2@YAPAXI@Z
_initterm
malloc
_adjust_fdiv
sprintf
__CxxFrameHandler
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kLfSCgr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ