DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
iCoFs
Static task
static1
Behavioral task
behavioral1
Sample
1967c5cfdb5949a4a7e7192dc8794be1_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1967c5cfdb5949a4a7e7192dc8794be1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1967c5cfdb5949a4a7e7192dc8794be1_JaffaCakes118
Size
40KB
MD5
1967c5cfdb5949a4a7e7192dc8794be1
SHA1
5097156753d787f2b1efba58bf90fdcfd72bc41e
SHA256
ed41a9674a433934c5516c2ad329b207f718f80c8bc52b96f2ad1ee7e6085904
SHA512
acbf2be577a09c5b4ee3228bb7a0a8a9336a9223129d7c94383612e004d8e3474acd6405b80a743d1125702df7afc4cc395e7b6d1331e3d153023bc6216a4aaf
SSDEEP
768:u99opkavV3fZ2/eAvu+DK0nn4gLa1h8UCb:uOPsDW0n5LawU
Checks for missing Authenticode signature.
resource |
---|
1967c5cfdb5949a4a7e7192dc8794be1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
GetProcAddress
InterlockedIncrement
GetModuleHandleA
GetCommandLineA
FreeLibrary
VirtualAlloc
GetSystemDirectoryA
CreateMutexA
GetLocalTime
WinExec
GetWindowsDirectoryA
CloseHandle
GetModuleFileNameA
LoadLibraryA
CreateThread
CreateProcessA
UnhookWindowsHookEx
SetWindowsHookExA
CreateWindowExA
ShowWindow
SetTimer
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
CallNextHookEx
FindWindowExA
PostMessageA
KillTimer
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
free
strchr
fopen
_stricmp
fwrite
fclose
__CxxFrameHandler
_except_handler3
strrchr
_initterm
malloc
_adjust_fdiv
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
iCoFs
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ