DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5dc0b514c1d20bf9b2191000c7646f87_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5dc0b514c1d20bf9b2191000c7646f87_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5dc0b514c1d20bf9b2191000c7646f87_JaffaCakes118
Size
40KB
MD5
5dc0b514c1d20bf9b2191000c7646f87
SHA1
d052b1e2ce52214f932875af8b4ec2bdf307df20
SHA256
c3d2172170961c0bb1507b9d1dec8e55d428d9067e889ee8f48fe5c194c2d38a
SHA512
42f3149a1d3ac58fe9309b5b5dd46a62e122886b38c45f1afb59f7d76aadb7cb0e3fcf35e99881f24be53ce4745ba8b2abf33aad67f24c0ff9b411080f8b9eac
SSDEEP
768:OD6BGJ2PRw4we96rzpkavDRKKSagLa16yA:DGJ25weorWCF6La5
Checks for missing Authenticode signature.
resource |
---|
5dc0b514c1d20bf9b2191000c7646f87_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLocalTime
WinExec
GetWindowsDirectoryA
VirtualAlloc
GetModuleFileNameA
InterlockedIncrement
CreateProcessA
CreateMutexA
CreateThread
CloseHandle
GetLastError
GetSystemDirectoryA
KillTimer
SetTimer
UnhookWindowsHookEx
RegisterClassExA
FindWindowExA
PostMessageA
CallNextHookEx
CreateWindowExA
ShowWindow
SetWindowsHookExA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
__CxxFrameHandler
strrchr
??2@YAPAXI@Z
??3@YAXPAX@Z
_stricmp
strchr
sprintf
fopen
_initterm
malloc
_adjust_fdiv
_except_handler3
fclose
fwrite
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ