DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
62566daa15cdd63a88aeac6b4f945a37_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
62566daa15cdd63a88aeac6b4f945a37_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62566daa15cdd63a88aeac6b4f945a37_JaffaCakes118
Size
24KB
MD5
62566daa15cdd63a88aeac6b4f945a37
SHA1
149395df2e2bf006b8f3ae6f022fd7e243f89342
SHA256
8d02cc1c8008cfd1d5e06fa0b413c69cd1c7cca36470de8ba6a9ba876d72fb98
SHA512
864dd06a6070256483f590abb19e75a6a0c4de326706b9d52af09b07e5073bb1de9d8b80a01194d2474593fba3214b72a927e9ef86702806ae184a6e7ce15b1f
SSDEEP
384:9DwA93tvaGdBjMk8c6mpokaJOag6W664BBqGvBNdB9cVZkF:9/7Tjlnw8agO64zHvDdGZkF
Checks for missing Authenticode signature.
resource |
---|
62566daa15cdd63a88aeac6b4f945a37_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
wsprintfA
DefWindowProcA
Process32First
Process32Next
HeapAlloc
HeapFree
GetProcessHeap
VirtualAlloc
GetProcAddress
ExitProcess
CloseHandle
CreateMutexA
OpenMutexA
ExitThread
Sleep
CreateEventA
CreateThread
OpenEventA
CreateNamedPipeA
ReadFile
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrlenA
LoadLibraryA
SetEvent
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
MoveFileExA
GetLastError
VirtualFree
ResetEvent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
CreateToolhelp32Snapshot
InternetCloseHandle
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetSetStatusCallback
InternetOpenA
InternetSetOptionA
InternetReadFile
_vsnprintf
memset
memmove
RtlUnwind
NtClose
NtDeviceIoControlFile
NtCreateFile
RtlInitUnicodeString
NtQueryVolumeInformationFile
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegEnumKeyA
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ