DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
23c30cc3771462f096cb207daf389742_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
23c30cc3771462f096cb207daf389742_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
23c30cc3771462f096cb207daf389742_JaffaCakes118
Size
48KB
MD5
23c30cc3771462f096cb207daf389742
SHA1
ef44ef24f2fd789db5b3408e7673b34518081024
SHA256
6a384b4cf451a6aa81fb6246173cf5d1fc81d4a79c87e92c9aa18f8fb931494f
SHA512
42c8fc9f707309d49363282d0de6230c6cb065f4898b8ed923462b360a7611dcd6914efa993cead806b7bb83d7c293cccf6677bcf7a33a9f57c68593b0ad71ab
SSDEEP
768:o962fu3pkavM/96HLM2nTdOeA4qrarB7gLa16:sV/yLMKwu90LaY
Checks for missing Authenticode signature.
resource |
---|
23c30cc3771462f096cb207daf389742_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
InterlockedIncrement
VirtualAlloc
GetLocalTime
GetSystemDirectoryA
GetLastError
WinExec
GetWindowsDirectoryA
CreateMutexA
GetModuleFileNameA
CreateProcessA
GetProcAddress
CloseHandle
LoadLibraryA
RegisterClassExA
KillTimer
DefWindowProcA
SetWindowsHookExA
CreateWindowExA
ShowWindow
UnhookWindowsHookEx
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
FindWindowExA
PostMessageA
SetTimer
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
strchr
fopen
fwrite
fclose
_stricmp
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_initterm
malloc
_adjust_fdiv
sprintf
strrchr
_except_handler3
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ