DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
irUArJjqQ
Static task
static1
Behavioral task
behavioral1
Sample
29a8de41bfa2f497b29d9f335c9adbfc_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29a8de41bfa2f497b29d9f335c9adbfc_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29a8de41bfa2f497b29d9f335c9adbfc_JaffaCakes118
Size
44KB
MD5
29a8de41bfa2f497b29d9f335c9adbfc
SHA1
4cab815de1c97a72c8b79b660eaeb27373569074
SHA256
676c8726de79541dc0faf21b0ca1dc734682f653ded98bce9755deaa5cd8331a
SHA512
0988bd967c85cccf490cbe12e7452ecae9f6585edff095a18f9c1a4422281a3a3a8ee76d213ed8fc970910e1afcd53822998c1f4edf164fccd1b6a9f4be59372
SSDEEP
768:+k62g0oH5t0jIypkavDc57mmoEd0gLa1M:+k6z5tuIhLllVLa
Checks for missing Authenticode signature.
resource |
---|
29a8de41bfa2f497b29d9f335c9adbfc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
InterlockedIncrement
WinExec
CreateMutexA
GetSystemDirectoryA
CreateThread
VirtualAlloc
CreateProcessA
GetLastError
CloseHandle
GetProcAddress
GetLocalTime
LoadLibraryA
GetWindowsDirectoryA
SetWindowsHookExA
FindWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
CreateWindowExA
ShowWindow
KillTimer
SetTimer
DefWindowProcA
RegisterClassExA
UnhookWindowsHookEx
PostMessageA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
_except_handler3
strchr
fopen
fwrite
_stricmp
fclose
strrchr
??3@YAXPAX@Z
_initterm
malloc
_adjust_fdiv
sprintf
__CxxFrameHandler
??2@YAPAXI@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
irUArJjqQ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ