DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
94e1abe0fd6b02e2292ba46628dc0384_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
94e1abe0fd6b02e2292ba46628dc0384_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
94e1abe0fd6b02e2292ba46628dc0384_JaffaCakes118
Size
44KB
MD5
94e1abe0fd6b02e2292ba46628dc0384
SHA1
2644f230085e954c3dde79b087835d60600d6bdf
SHA256
6960be2d44ff9872be7cac74720f11fcd34d9daccb6ff85a814981af4a587097
SHA512
e4355160e600d616bb94f98439c2408c2b3a984b39bf15e8a479a7ea67e4bab79ffbca1077f5a7a96e1b7bda57ab31113f677ee483009918fb0fecb61069fb49
SSDEEP
768:3tRIWQVpkav2KESdOT3DwfjVCrUgLa1hnoy:33IuJKES83Dwri1Lafo
Checks for missing Authenticode signature.
resource |
---|
94e1abe0fd6b02e2292ba46628dc0384_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CreateMutexA
VirtualAlloc
GetProcAddress
WinExec
GetLocalTime
GetSystemDirectoryA
CreateProcessA
LoadLibraryA
CreateThread
GetModuleFileNameA
CloseHandle
InterlockedIncrement
GetWindowsDirectoryA
CreateWindowExA
ShowWindow
TranslateMessage
DispatchMessageA
KillTimer
SetTimer
DefWindowProcA
SetWindowsHookExA
CallNextHookEx
FindWindowExA
PostMessageA
UnhookWindowsHookEx
RegisterClassExA
GetMessageA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
strchr
fopen
fwrite
fclose
_stricmp
_except_handler3
__CxxFrameHandler
sprintf
_initterm
malloc
_adjust_fdiv
strrchr
??3@YAXPAX@Z
??2@YAPAXI@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ