DllRegisterServer
DllUnregisterServer
RSTRCEvUKL
jcVKWsA
volLjBCHpUx
Static task
static1
Behavioral task
behavioral1
Sample
72a58c15e505dad9d0c63d9d6a11a143_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
72a58c15e505dad9d0c63d9d6a11a143_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
72a58c15e505dad9d0c63d9d6a11a143_JaffaCakes118
Size
36KB
MD5
72a58c15e505dad9d0c63d9d6a11a143
SHA1
dcbd1e3f34f5656489018865e54f6a047b8ecf07
SHA256
d7b1b44cda47e746532128f6056271851b8c5838c4e6814ddedf20beb7b8de5c
SHA512
d26dfa0f8f24c13d50f8b4fd3e0c119385a5e181e8340269dd096bf766a292c1ab9b3899388d0ab0039b29eb6ed29f79863f6f92d9bbb948c2ec9461577a28ff
SSDEEP
768:1OeFfwPA6V1I1BVeIoOCF+uMmr30DZQe7+7SDr:UeFfwPA6V1I13oOC8m70DZ++D
Checks for missing Authenticode signature.
resource |
---|
72a58c15e505dad9d0c63d9d6a11a143_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetModuleFileNameA
InterlockedIncrement
WritePrivateProfileStringA
DeleteFileA
GetSystemDirectoryA
GetProcAddress
GetWindowsDirectoryA
LoadLibraryA
GetLocalTime
FindWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
SetTimer
PostMessageA
DefWindowProcA
CreateWindowExA
ShowWindow
CallNextHookEx
RegisterClassExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
_initterm
free
__CxxFrameHandler
strstr
strrchr
_access
_strlwr
malloc
_adjust_fdiv
_stricmp
fclose
fwrite
fopen
sprintf
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
DllRegisterServer
DllUnregisterServer
RSTRCEvUKL
jcVKWsA
volLjBCHpUx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ