DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8c97bb51f8eac03fc35ad5ab791384ff_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8c97bb51f8eac03fc35ad5ab791384ff_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8c97bb51f8eac03fc35ad5ab791384ff_JaffaCakes118
Size
48KB
MD5
8c97bb51f8eac03fc35ad5ab791384ff
SHA1
29bdf4e471f600b4eaae5fb2109b4af681be9c1d
SHA256
e7a3e663438a091cdd8cbc6a1d1ffde58416cffef5c31a9c84aa594b9fcbed13
SHA512
c61edf187ba5ddd506f4d68d40551a15722d9ac84eb7d961c8fde1d332cc3519c29b8f0b18efd667ef49e76752d03d3dd05539b1a2ddf444a7ae6444c84373b7
SSDEEP
768:+wNOKAb4XUtZpkavLGmJeJO23azZ3IAwfgLa160G:+NK+4ktwoG4SGYT4LaY
Checks for missing Authenticode signature.
resource |
---|
8c97bb51f8eac03fc35ad5ab791384ff_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
GetLocalTime
GetProcAddress
GetLastError
CreateMutexA
CreateProcessA
GetWindowsDirectoryA
VirtualAlloc
LoadLibraryA
CreateThread
GetModuleFileNameA
CloseHandle
InterlockedIncrement
WinExec
UnhookWindowsHookEx
ShowWindow
SetWindowsHookExA
KillTimer
SetTimer
FindWindowExA
PostMessageA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
CallNextHookEx
CreateWindowExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SHGetValueA
free
_except_handler3
strchr
fopen
fwrite
fclose
_stricmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_initterm
malloc
_adjust_fdiv
strrchr
__CxxFrameHandler
sprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ