DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3ed1022c2132e97b8de9c7125e7e9909_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ed1022c2132e97b8de9c7125e7e9909_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ed1022c2132e97b8de9c7125e7e9909_JaffaCakes118
Size
32KB
MD5
3ed1022c2132e97b8de9c7125e7e9909
SHA1
5e9f4fd4211d3d6515e8d08964842cb93d2e99ee
SHA256
7a2e70932ab7fdf7439053c65234114fb111c6248d01e0e1ce994906d9ffae2e
SHA512
d033ee51a2059c803f12f9d0004e97b3110a53c34d423744a319fda2111c50fe4356a72b9f30b2a15d4ffc8ff96085ff4441d9dc09a82ab4250eec013f02b0a2
SSDEEP
192:Rfm1dVkpIleziD9cglm62HIgOKnJd1vvvTpDZbbloImVQeLisWYYEpP4uRPl8flo:Rfm1aO9q6uIwF3vTtDoJXus9WGu/c5
Checks for missing Authenticode signature.
resource |
---|
3ed1022c2132e97b8de9c7125e7e9909_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
CloseHandle
CreateThread
LoadLibraryA
GetWindowsDirectoryA
WinExec
InterlockedIncrement
GetModuleFileNameA
DeleteFileA
GetLocalTime
GetProcAddress
UnhookWindowsHookEx
CreateWindowExA
ShowWindow
SetTimer
KillTimer
DefWindowProcA
RegisterClassExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowExA
PostMessageA
SetWindowsHookExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
SHGetSpecialFolderPathA
_initterm
free
strstr
strchr
fopen
fwrite
fclose
strrchr
_strlwr
malloc
_adjust_fdiv
_stricmp
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
_access
sprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ