DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2918eb2e6aa7506eed292994936baed5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2918eb2e6aa7506eed292994936baed5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2918eb2e6aa7506eed292994936baed5_JaffaCakes118
Size
48KB
MD5
2918eb2e6aa7506eed292994936baed5
SHA1
2adfec0f3fd3ab036d7a4eeb1a5617eece855e12
SHA256
c1c006f31089fe76b2318c0632f427997703d82311e70b04f9a8533e957a33ae
SHA512
52eaaf6cd6100761c264ea10d84f4c149e67780526d151e7648a3d957ffdceb7faf83955c2f62a1ac8328e19ae8fe5ee11b65769542d9e39e2d6aca2d74f6e94
SSDEEP
384:2MpDtkav525Malj/Mi0N5D45QpjNx8nH6IOK/aUXb/8ok185JpJgLa0MpnCFWtK:tpkavGfD0N6shqnHNOob9O8LgLa1EU
Checks for missing Authenticode signature.
resource |
---|
2918eb2e6aa7506eed292994936baed5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetLocalTime
GetModuleFileNameA
GetProcAddress
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
CreateProcessA
VirtualAlloc
CreateThread
CloseHandle
CreateMutexA
GetLastError
InterlockedIncrement
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
KillTimer
SetTimer
DefWindowProcA
FindWindowExA
PostMessageA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
free
strchr
fopen
fwrite
fclose
_stricmp
strrchr
__CxxFrameHandler
??2@YAPAXI@Z
_initterm
malloc
_adjust_fdiv
sprintf
_except_handler3
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ