DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4d1811ee33e8559fec7a9d956060ecf6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d1811ee33e8559fec7a9d956060ecf6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d1811ee33e8559fec7a9d956060ecf6_JaffaCakes118
Size
32KB
MD5
4d1811ee33e8559fec7a9d956060ecf6
SHA1
f1c1770405240478da4b6c0a4e3d34d14815c59d
SHA256
64f98ea6d894396674352f6dbe961bed590211399cef0ebaa6b3f2eb35cf6ce3
SHA512
a0c05ff295f819ff2ad827cacd96b5fd094c868ad1fdbec2fc13eaed8ac6aa11215a6e1a15821d47c975093b8ee040063263c87cfa9d61e8c236125456eb5e14
SSDEEP
384:w+QbyY4WSGzkgHKBIfT9sfrNPNf/uCr/PqwCleE:w+Qby5vGzkgHTirNV/uCr/PMs
Checks for missing Authenticode signature.
resource |
---|
4d1811ee33e8559fec7a9d956060ecf6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateThread
DeleteFileA
InterlockedIncrement
GetLocalTime
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
WinExec
GetProcAddress
LoadLibraryA
CreateWindowExA
ShowWindow
SetTimer
KillTimer
UnhookWindowsHookEx
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
FindWindowExA
PostMessageA
DefWindowProcA
SetWindowsHookExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
SHGetSpecialFolderPathA
_initterm
free
strchr
fopen
fwrite
fclose
strstr
__CxxFrameHandler
_strlwr
malloc
_adjust_fdiv
_stricmp
strrchr
_access
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ