DllInstall
InitCommon
InitService
StartProt
Static task
static1
Behavioral task
behavioral1
Sample
abf4d87d727d6d8573834d4360124e1e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
abf4d87d727d6d8573834d4360124e1e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
abf4d87d727d6d8573834d4360124e1e_JaffaCakes118
Size
39KB
MD5
abf4d87d727d6d8573834d4360124e1e
SHA1
e24f4bd5b86b72c33bc655cd78ec74fb3e9a8a6f
SHA256
3bfa331c4cfce20378838d0f77e143a679026a5bdd410442196b90c7ff0deb27
SHA512
e09d5bf34d57036fc65d37d5685a30e6066d3d95dbfb9b7a1fae792bf49a4af1f86bfe30acd8054d1dae7a64270f3a6847aab363a97aebf131b4f1fedb867d7e
SSDEEP
768:ra0A/J9oi3j60KfJAAKrpzrZgTptW7fGf0tddqtm:20KJ9ow60AKxqtW7fGcEt
Checks for missing Authenticode signature.
resource |
---|
abf4d87d727d6d8573834d4360124e1e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
GetFileSize
ReadFile
GetEnvironmentVariableA
GetProcAddress
LoadLibraryA
CloseHandle
MoveFileExA
FreeLibrary
WaitForSingleObject
CreateProcessA
CopyFileA
GetTempFileNameA
GetModuleFileNameA
LoadLibraryExA
CreateMutexA
ReleaseMutex
GetTempPathA
DeleteFileA
ExitProcess
GetModuleHandleExA
GetCommandLineA
Sleep
ExitThread
CreateDirectoryA
GetLastError
OpenMutexA
GetCurrentProcessId
CreateThread
GetVolumeInformationW
GetSystemTime
SetFilePointer
GetTickCount
LoadLibraryW
GetSystemDirectoryA
VirtualProtect
CreateMutexW
CompareFileTime
GetSystemTimeAsFileTime
WaitNamedPipeW
WriteFile
CreateFileW
ConnectNamedPipe
CreateNamedPipeW
CreateEventA
DisconnectNamedPipe
RaiseException
InterlockedExchange
LocalAlloc
GetMessageW
CallNextHookEx
SetWindowsHookExA
free
malloc
strlen
strcat
memcpy
memset
strncat
strncmp
strstr
strcpy
strchr
strrchr
??2@YAPAXI@Z
memmove
strcmp
wcscmp
memcmp
atoi
strncpy
rand
srand
??3@YAXPAX@Z
_initterm
_adjust_fdiv
_itoa
_strlwr
_except_handler3
DllInstall
InitCommon
InitService
StartProt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ