DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
df64b201e0af93fe4693b2ee66a5497b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
df64b201e0af93fe4693b2ee66a5497b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
df64b201e0af93fe4693b2ee66a5497b_JaffaCakes118
Size
48KB
MD5
df64b201e0af93fe4693b2ee66a5497b
SHA1
af10477752b9c6085c14c8d56bfc2d3b94a128c2
SHA256
f840722516527ae93209e3a00556518b483b61e213d2ad739f4462b2c935f09b
SHA512
012f251c3a72a957b9d77031071a60359f2b0afeb49a59417be0be178cc1586f6d4327e21b65c5e1765c20bd5abaef4bddde4a1ce5e9764e6641ac8e3fcc83d8
SSDEEP
768:Fk/jb1Q4pkav3CH2vmy8M5Jq21KngLa1a9:FkLJ2AI2vr8R2IgLa49
Checks for missing Authenticode signature.
resource |
---|
df64b201e0af93fe4693b2ee66a5497b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
GetSystemDirectoryA
WinExec
GetWindowsDirectoryA
GetProcAddress
GetLocalTime
CreateThread
VirtualAlloc
InterlockedIncrement
GetModuleFileNameA
CloseHandle
CreateMutexA
GetLastError
LoadLibraryA
GetMessageA
TranslateMessage
UnhookWindowsHookEx
KillTimer
SetTimer
DefWindowProcA
CreateWindowExA
ShowWindow
RegisterClassExA
SetWindowsHookExA
FindWindowExA
PostMessageA
CallNextHookEx
DispatchMessageA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
_except_handler3
__CxxFrameHandler
strchr
fopen
_stricmp
fwrite
fclose
sprintf
_initterm
malloc
_adjust_fdiv
strrchr
??3@YAXPAX@Z
??2@YAPAXI@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ