DllCanUnloadNow
DllGetClassObject
HandlerEx
Inst
LoadIt
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
628daadc4612722b6f737a8c00b3b166_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
628daadc4612722b6f737a8c00b3b166_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
628daadc4612722b6f737a8c00b3b166_JaffaCakes118
Size
77KB
MD5
628daadc4612722b6f737a8c00b3b166
SHA1
e046697a2ea6567f56f13951c6eedde4079106ff
SHA256
493f85aa8fc1472fd734e7dae7a1358f06a7de3bc89b68da77d1f2d6a8a740da
SHA512
fe3bd486dcbf7cd64f0ddc645044e3934c19e47f7348842cb15b4b49433ae4060380972350a6301de404f969721763d55478c47d28366342e8c2bfde42b26870
SSDEEP
1536:CG/YGiJdzjWGuwku6UJUcu+JwMNrp1fIjbS1bdWGvw4dojHSpORS8:CG/YGiJdzaGu06UJ++Jhh6epsGBeWOR
Checks for missing Authenticode signature.
resource |
---|
628daadc4612722b6f737a8c00b3b166_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
memcpy
memset
atoi
malloc
free
_itoa
time
srand
rand
strchr
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetModuleHandleA
LoadLibraryA
FreeLibrary
LockResource
SizeofResource
LoadResource
FreeResource
FindResourceA
CloseHandle
ReadFile
WriteFile
CreateFileA
ExitProcess
GetProcAddress
GetSystemTimeAsFileTime
DllCanUnloadNow
DllGetClassObject
HandlerEx
Inst
LoadIt
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ