DllCanUnloadNow
DllGetClassObject
HandlerEx
Inst
LoadIt
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3194e9119f88a66a560e9b29bd6f18aa_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3194e9119f88a66a560e9b29bd6f18aa_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3194e9119f88a66a560e9b29bd6f18aa_JaffaCakes118
Size
74KB
MD5
3194e9119f88a66a560e9b29bd6f18aa
SHA1
aa4e89c3132e9bb9648594f579bc43d9157ceb9c
SHA256
91e16e5cd5e5dd15d7f4b10e724ef63b4fc4f4bb0a6a4b5095025a496463ecae
SHA512
0da951154b028b7b236967b4a5f9f69d22217cc230afc86e13a6702e2d9c6a61655001c057d23fda4244bab0e5e4daed2de7312d366519c679b8c741c7beedd2
SSDEEP
1536:WQVAmTJCAsZjFIBAaXyrhuokRgFNKeILZPd8Ne8ZREua:17TJCAsZZDbrhuokjeIZPdSlZR8
Checks for missing Authenticode signature.
resource |
---|
3194e9119f88a66a560e9b29bd6f18aa_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
memcpy
memset
atoi
malloc
free
_itoa
time
srand
rand
strchr
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetModuleHandleA
LoadLibraryA
FreeLibrary
LockResource
SizeofResource
LoadResource
FreeResource
FindResourceA
CloseHandle
ReadFile
WriteFile
CreateFileA
ExitProcess
GetProcAddress
GetSystemTimeAsFileTime
DllCanUnloadNow
DllGetClassObject
HandlerEx
Inst
LoadIt
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ