DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2e14dc9e9e40959fcc4aefeae8a874cf_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e14dc9e9e40959fcc4aefeae8a874cf_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e14dc9e9e40959fcc4aefeae8a874cf_JaffaCakes118
Size
48KB
MD5
2e14dc9e9e40959fcc4aefeae8a874cf
SHA1
b1b1ad70484a4db97b98b64156407c7f704d6b96
SHA256
044be73875a66c4fc8945be0bbf1620a1cf52740599cc430c340d0e1fd42e466
SHA512
c53cfd362576a45f7a7a600248d560b9dcdc2b5bd21c8bf60fc2dd200d796b3a6c18cf5efa2ac1873a157f851b22e43e377499b32bd3a9a11fa989397d71b455
SSDEEP
768:Tj6mWOpyKamRXxpkavT4R7pit18AQgLa16:Tm8JB+litVRLaY
Checks for missing Authenticode signature.
resource |
---|
2e14dc9e9e40959fcc4aefeae8a874cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CloseHandle
CreateMutexA
WinExec
GetSystemDirectoryA
CreateThread
VirtualAlloc
CreateProcessA
GetLocalTime
LoadLibraryA
GetModuleFileNameA
GetProcAddress
InterlockedIncrement
GetWindowsDirectoryA
SetWindowsHookExA
UnhookWindowsHookEx
ShowWindow
FindWindowExA
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
SetTimer
DefWindowProcA
RegisterClassExA
CallNextHookEx
CreateWindowExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
_except_handler3
strchr
fopen
fwrite
_stricmp
fclose
__CxxFrameHandler
??2@YAPAXI@Z
_initterm
malloc
_adjust_fdiv
strrchr
sprintf
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ