DllRegisterServer
DllUnregisterServer
Mvu
OcfUBRqs
gKOqlLfXZPxwCK
Static task
static1
Behavioral task
behavioral1
Sample
d5aeb3aaec4d64b494e8757b273335e1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5aeb3aaec4d64b494e8757b273335e1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d5aeb3aaec4d64b494e8757b273335e1_JaffaCakes118
Size
36KB
MD5
d5aeb3aaec4d64b494e8757b273335e1
SHA1
5a03e4050795b61c35d574dc5eaacd051c70d312
SHA256
e73639da69832c97e31670c823e603142e224391868f2a123a66086077fbcd9e
SHA512
c0506088fb48a9a1db82fea30b03b411f0db6e5b43f725f415c2cbdcd202611473d950fb8197a13a89c59a8e520c3a400ac51d226d3779b117d1d5d2d884eaa4
SSDEEP
768:4eMhn8TC2j3wucDHhnI40oVM25F3T1Z5rnkoJNlbZK:4hn8TC/ukhnI40oaaF3RrnkKbZK
Checks for missing Authenticode signature.
resource |
---|
d5aeb3aaec4d64b494e8757b273335e1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
InterlockedIncrement
GetSystemDirectoryA
DeleteFileA
GetWindowsDirectoryA
GetModuleFileNameA
WritePrivateProfileStringA
LoadLibraryA
GetProcAddress
GetLocalTime
DefWindowProcA
PostMessageA
SetTimer
KillTimer
FindWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
CallNextHookEx
CreateWindowExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
__CxxFrameHandler
_stricmp
_adjust_fdiv
malloc
_initterm
free
strstr
strchr
fopen
fwrite
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
sprintf
_strlwr
_access
strrchr
fclose
DllRegisterServer
DllUnregisterServer
Mvu
OcfUBRqs
gKOqlLfXZPxwCK
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ