DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0eb192e2a8dd217b53618b02be1a5921_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0eb192e2a8dd217b53618b02be1a5921_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0eb192e2a8dd217b53618b02be1a5921_JaffaCakes118
Size
48KB
MD5
0eb192e2a8dd217b53618b02be1a5921
SHA1
1c6b915646df041d39b7272b874d70ea6c2a9fad
SHA256
7e10f15f71045cbce3b1ac14502e2cfe5801dafb7051b5edc77b29878b9fcf71
SHA512
8351dc234b7ef5879e998c14bb3c23271bf55ffe997583a25e9bc9d7e9b2b6e8bbb21105b589711ec17575c32ff4e78625a74954a0e180474a30a829ef4d44d7
SSDEEP
768:8yGGe3pkav6NEgyK9zNMoaGUTmKtKB+eu5G/OX/+gLa1Y+Ri:85KJtZK7tABhivbLaFRi
Checks for missing Authenticode signature.
resource |
---|
0eb192e2a8dd217b53618b02be1a5921_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetLocalTime
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
GetProcAddress
CreateThread
VirtualAlloc
CreateMutexA
GetLastError
GetModuleFileNameA
CloseHandle
InterlockedIncrement
CreateProcessA
UnhookWindowsHookEx
PostMessageA
SetWindowsHookExA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
CreateWindowExA
ShowWindow
KillTimer
SetTimer
DefWindowProcA
CallNextHookEx
FindWindowExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
SHGetValueA
free
_except_handler3
strchr
fopen
fwrite
fclose
_stricmp
__CxxFrameHandler
??2@YAPAXI@Z
_initterm
malloc
_adjust_fdiv
??3@YAXPAX@Z
sprintf
strrchr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ