??0Copendll@@QAE@XZ
??4Copendll@@QAEAAV0@ABV0@@Z
?charopendll@@YAPADXZ
?classdll@@3PADA
Static task
static1
Behavioral task
behavioral1
Sample
b5bf4b98dc38d3a16502129f98d5e5c1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b5bf4b98dc38d3a16502129f98d5e5c1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b5bf4b98dc38d3a16502129f98d5e5c1_JaffaCakes118
Size
5KB
MD5
b5bf4b98dc38d3a16502129f98d5e5c1
SHA1
6ca746fad1a7a99f9472d7fd85f1aa8244f7c0e0
SHA256
173f02f7c9c5d02ec5d4f133f83fa8a56c90aa2df516a3bb75f09f61c012fdc7
SHA512
11944ffbf8b3869e34b94a84a3cbbdebc74b1e32557d38ebe1f1859ce1a1f007d69c102d82fc8061944f2bf9b6e39fa95bc1d2dcb1af1586fecbbd91682dd913
SSDEEP
96:9thIWZ0U+KJRen/Se2kCEYoK564tAkW2ClOPZLH2:97r7ent2EYoKPZW2cOtH2
Checks for missing Authenticode signature.
resource |
---|
b5bf4b98dc38d3a16502129f98d5e5c1_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteProcessMemory
VirtualAllocEx
OpenProcess
VirtualFreeEx
Sleep
WritePrivateProfileStringA
GetPrivateProfileStringA
GetSystemDirectoryA
LoadLibraryA
CreateRemoteThread
WaitForSingleObject
FindClose
CloseHandle
FindFirstFileA
RegCloseKey
RegSetValueExA
RegCreateKeyA
EnumProcesses
EnumProcessModules
GetModuleFileNameExA
_strlwr
_beginthread
strcmp
strncat
strcpy
strlen
_itoa
strstr
strcat
??0Copendll@@QAE@XZ
??4Copendll@@QAEAAV0@ABV0@@Z
?charopendll@@YAPADXZ
?classdll@@3PADA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ