DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FPrMpPjPZG
Static task
static1
Behavioral task
behavioral1
Sample
19ad1d6d3822e8fe3cdcd852ef20ab70_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
19ad1d6d3822e8fe3cdcd852ef20ab70_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
19ad1d6d3822e8fe3cdcd852ef20ab70_JaffaCakes118
Size
44KB
MD5
19ad1d6d3822e8fe3cdcd852ef20ab70
SHA1
1788e0f5610a34964a1e319def3ffae44064ce50
SHA256
f7417d1dcfca5849a2425f615c5f5bf7e25f62a98352c4b2c707d01f697ce720
SHA512
443f5f08a15a3051af8c6d41c8837b481bca57091492e46e412955c60cac07eba642ec6f4919fa5295f76f39bd8c959e4ea4c10b1dc59dfcba15b89d7b94acdb
SSDEEP
768:CvI/pkavzIQxR2uEdTk8VNvsgfyubgLa1hWu:CAyiIgYH68VNjHULaHWu
Checks for missing Authenticode signature.
resource |
---|
19ad1d6d3822e8fe3cdcd852ef20ab70_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMutexA
CreateProcessA
GetSystemDirectoryA
GetLocalTime
InterlockedIncrement
GetProcAddress
GetLastError
VirtualAlloc
WinExec
GetWindowsDirectoryA
GetModuleFileNameA
CloseHandle
LoadLibraryA
CreateThread
FreeLibrary
CallNextHookEx
CreateWindowExA
ShowWindow
FindWindowExA
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowsHookExA
KillTimer
SetTimer
DefWindowProcA
RegisterClassExA
UnhookWindowsHookEx
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
strchr
fopen
fwrite
_stricmp
fclose
_except_handler3
strrchr
??3@YAXPAX@Z
_initterm
malloc
_adjust_fdiv
sprintf
__CxxFrameHandler
??2@YAPAXI@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FPrMpPjPZG
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ