DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
tRqrxg
Static task
static1
Behavioral task
behavioral1
Sample
b2da9a7001c60b453a7451003c881020_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2da9a7001c60b453a7451003c881020_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b2da9a7001c60b453a7451003c881020_JaffaCakes118
Size
44KB
MD5
b2da9a7001c60b453a7451003c881020
SHA1
0a1f68257c9cdd5968c0ced7cb3178176b2a2e7a
SHA256
7611ab8d6e6bf178973da68ddb50d197681e8765ba9d65188c582a7bb981dbcc
SHA512
af9e5a4acdf760a76911b1234ef29adeaa57e5afb7daeefe4ff0aafd55816988a7abad607a0446dbf212e98002537f52ba358d72ff8cbb59e5d710493e854e82
SSDEEP
384:4AcdDtkav5SDQHadRDdZljb6VgNLrkiPO2jDtwEXX1s/yJpJgLa0MpLZ7:IpkavEmadDZBNLzrlbXXqigLa1lZ7
Checks for missing Authenticode signature.
resource |
---|
b2da9a7001c60b453a7451003c881020_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowsDirectoryA
GetSystemDirectoryA
GetLocalTime
CreateProcessA
CreateThread
WinExec
GetModuleHandleA
GetCommandLineA
FreeLibrary
VirtualAlloc
GetProcAddress
CloseHandle
InterlockedIncrement
GetModuleFileNameA
CreateMutexA
GetLastError
LoadLibraryA
RegisterClassExA
SetWindowsHookExA
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
SetTimer
CallNextHookEx
CreateWindowExA
ShowWindow
FindWindowExA
PostMessageA
DefWindowProcA
UnhookWindowsHookEx
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
_except_handler3
_stricmp
_initterm
malloc
_adjust_fdiv
sprintf
strrchr
??2@YAPAXI@Z
??3@YAXPAX@Z
fclose
fwrite
fopen
strchr
__CxxFrameHandler
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
tRqrxg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ