DllRegisterServer
DllUnregisterServer
Rundll32
Static task
static1
Behavioral task
behavioral1
Sample
b577d41cbffc81ea4e8407144f1c7a92_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b577d41cbffc81ea4e8407144f1c7a92_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b577d41cbffc81ea4e8407144f1c7a92_JaffaCakes118
Size
44KB
MD5
b577d41cbffc81ea4e8407144f1c7a92
SHA1
2a05acecf24a4e73ed2b47196dd30e8839a8bbec
SHA256
2a4a4283110d0aae5d8065f0a5834867e04a9e1ac725bb891713db1d0cb96165
SHA512
2231199baa2dec3095003d8c180d23720b15af37a02ac2be8f7f8478287525423d18826e5c4ac2af51a5e74fe761db68d994a67de992dbb62713939c85b8f242
SSDEEP
384:12qWOST9+f1xDuEPn41iQx+DXWw22KzvkbS+uIP92SKlsq:1rWOST9+dxCEP4oQUzWw23vkbS+992/
Checks for missing Authenticode signature.
resource |
---|
b577d41cbffc81ea4e8407144f1c7a92_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateFileA
GetVersion
GetCurrentProcess
GetCurrentThread
OpenProcess
Process32Next
GetProcAddress
LoadLibraryA
GetFileAttributesA
SizeofResource
LoadResource
FindResourceA
WriteFile
TerminateProcess
CopyFileA
GetTempPathA
OutputDebugStringA
SetFileAttributesA
GetSystemDirectoryA
lstrcatA
CreateProcessA
GetShortPathNameA
GetWindowsDirectoryA
GetLastError
MoveFileExA
Sleep
GetModuleFileNameA
ExitProcess
DeleteFileA
FreeLibrary
LockResource
GetVersionExA
wsprintfA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenSCManagerA
DeleteService
ControlService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
RegOpenKeyExA
OpenThreadToken
SHGetSpecialFolderPathA
fopen
sprintf
strrchr
fclose
fprintf
fseek
_strnicmp
fgets
rewind
_snprintf
SHSetValueA
PathFileExistsA
URLDownloadToCacheFileA
DllRegisterServer
DllUnregisterServer
Rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ