DllRegisterServer
DllUnregisterServer
onStartup
Static task
static1
Behavioral task
behavioral1
Sample
5fe70db532ffd69e3711a0c2900ea5c0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5fe70db532ffd69e3711a0c2900ea5c0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5fe70db532ffd69e3711a0c2900ea5c0_JaffaCakes118
Size
92KB
MD5
5fe70db532ffd69e3711a0c2900ea5c0
SHA1
7e15924ec8ad0991af88847233bafadfb819866f
SHA256
9748e13d62ea966d6d0896fc71f19aaa3503b1ada4b275a1d14d38b124a153fd
SHA512
c487951694b24eaf26e3f0bafd0bbb03a3481db16a2d36f0c3a66a7e6ab6b3751b0c2efa527a62761fa9d47c03b847669f54d9cb717111d494532be0444776c9
SSDEEP
768:YVaO74S5FICTHeV8AbVYL5+ePJ04EaYar1H8FkDwylaHVs+bC:YVam4SrTHrV9VEaxrSFkDlaHVtbC
Checks for missing Authenticode signature.
resource |
---|
5fe70db532ffd69e3711a0c2900ea5c0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
MoveFileA
GetTickCount
GetLastError
DeleteFileA
lstrcmpiA
CopyFileA
VirtualProtect
VirtualAlloc
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetSystemWindowsDirectoryA
VirtualFree
lstrlenA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
lstrcmpA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
GetSystemMetrics
ShellExecuteA
PathStripPathA
PathAppendA
__C_specific_handler
memset
abort
strchr
_vsnprintf
memcpy
sprintf
DllRegisterServer
DllUnregisterServer
onStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ