DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4820485830d650d41af4e812e55a9aa1_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4820485830d650d41af4e812e55a9aa1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4820485830d650d41af4e812e55a9aa1_JaffaCakes118
Size
32KB
MD5
4820485830d650d41af4e812e55a9aa1
SHA1
8e27e6945acf28764b7ce3098f6f085e987d4be2
SHA256
7241396c7e1c0464533683d9e2daf34605f394bbf5f7a269c8901340c8da87d0
SHA512
c92b37b9fb42b3018bd11c3d9baaad1bfcbc40ac31e58cfbf80fbbd1e397ac0cc5be0b4929a59936e0fbb9ff35e591c6e0a41533e861f2723bbaaaf20c90db0e
SSDEEP
384:ay/+H/oZGzkkznR0l7QczSBX5mNtftxD/k:nywQTnR05Qc2BJmNbxD/k
Checks for missing Authenticode signature.
resource |
---|
4820485830d650d41af4e812e55a9aa1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetModuleFileNameA
DeleteFileA
GetProcAddress
CreateThread
GetSystemDirectoryA
GetWindowsDirectoryA
InterlockedIncrement
CloseHandle
GetLocalTime
WinExec
CallNextHookEx
CreateWindowExA
ShowWindow
SetWindowsHookExA
UnhookWindowsHookEx
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
SetTimer
DefWindowProcA
FindWindowExA
PostMessageA
RegisterClassExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
SHGetSpecialFolderPathA
_initterm
free
strrchr
strchr
fopen
fwrite
fclose
??3@YAXPAX@Z
_stricmp
malloc
_adjust_fdiv
_strlwr
_access
strstr
sprintf
__CxxFrameHandler
??2@YAPAXI@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ