DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8627f16450298bd5dc40c17cdd36b9c1_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8627f16450298bd5dc40c17cdd36b9c1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8627f16450298bd5dc40c17cdd36b9c1_JaffaCakes118
Size
44KB
MD5
8627f16450298bd5dc40c17cdd36b9c1
SHA1
5913b590ff57d591f504822c025d711c5dfe9229
SHA256
e75f1a9b8a668ee06aa4b363bffbe8abcec17cfa78c163a9aad3b9cb4e0559a2
SHA512
b971831994d257f315236e7bc6c28765c37f4c3e083e31419d37bc6597d6eb31906244b1868738777aa9918b0fe3581a808c33a8a34901373583c037e3910345
SSDEEP
768:BpkavbS/BG7Qu5bh6a+6JIyejDsgfmpUhgLa1A6jHU4zR:YrBMdd0yeE3UOLalTU4z
Checks for missing Authenticode signature.
resource |
---|
8627f16450298bd5dc40c17cdd36b9c1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowsDirectoryA
GetProcAddress
LoadLibraryA
CreateThread
InterlockedIncrement
WinExec
GetLastError
CreateMutexA
GetLocalTime
GetSystemDirectoryA
CloseHandle
GetModuleFileNameA
CreateProcessA
VirtualAlloc
KillTimer
SetTimer
UnhookWindowsHookEx
CallNextHookEx
CreateWindowExA
ShowWindow
FindWindowExA
PostMessageA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowsHookExA
DefWindowProcA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
free
__CxxFrameHandler
_except_handler3
strrchr
??2@YAPAXI@Z
_stricmp
??3@YAXPAX@Z
strchr
fopen
_initterm
malloc
_adjust_fdiv
sprintf
fclose
fwrite
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ