DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b90ddb34f388afa7f4671c31f840cac6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b90ddb34f388afa7f4671c31f840cac6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b90ddb34f388afa7f4671c31f840cac6_JaffaCakes118
Size
44KB
MD5
b90ddb34f388afa7f4671c31f840cac6
SHA1
03fc82241aceb09de594cfeaaaf0a75aca0bad96
SHA256
ddc362e3f269c1de5d5100a832e9b9c1853c9e84fb33ddda9882729caefda2c9
SHA512
b2ad44f946397242ded892140ce94c7b52dd1e6b231ca19ab1de3ad80cf787ea3ec3f22ebbe12cf560241b390b1f844d2a5ecdeff1e1767849dee71eb970cb22
SSDEEP
768:qolG9Qs9a4ZzKcEHbpkavngJUgLa1hJZ5WJF:w9FVh7J1LaB7WT
Checks for missing Authenticode signature.
resource |
---|
b90ddb34f388afa7f4671c31f840cac6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
GetLocalTime
CreateThread
VirtualAlloc
CreateProcessA
CreateMutexA
GetLastError
GetProcAddress
CloseHandle
LoadLibraryA
InterlockedIncrement
SetWindowsHookExA
CallNextHookEx
PostMessageA
KillTimer
SetTimer
DefWindowProcA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
UnhookWindowsHookEx
RegisterClassExA
FindWindowExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
free
__CxxFrameHandler
_except_handler3
strrchr
strchr
_stricmp
fopen
fwrite
fclose
_initterm
malloc
_adjust_fdiv
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ