DllRegisterServer
DllUnregisterServer
OUyXeQQQBNeAF
fTztCVOJCDxzwu
nHFqgFHwzssQ
Static task
static1
Behavioral task
behavioral1
Sample
ff97ee4ae287c813a1cfbccdd869599e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff97ee4ae287c813a1cfbccdd869599e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ff97ee4ae287c813a1cfbccdd869599e_JaffaCakes118
Size
32KB
MD5
ff97ee4ae287c813a1cfbccdd869599e
SHA1
e6923d262d3d01f8391d73f2d8b886fe4f0f4182
SHA256
a38f9ef9c024a0ee3ce880c29c00e5b96471c486a5ef3d7a1393c0a43793f9ea
SHA512
2193ead5d19368859e87e3bea00ed1c0c3425cdf3e2d9728f0062bd1c614132919ef5b6ff96dbf768815c51818962dad723c85672ba30b426a4ea382e54d4beb
SSDEEP
768:O7rXA0bVI6anpEK2epXhUY3nsiOaScR/Sa:OTOppEKt1oaS2/S
Checks for missing Authenticode signature.
resource |
---|
ff97ee4ae287c813a1cfbccdd869599e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
CloseHandle
GetWindowsDirectoryA
DeleteFileA
GetLocalTime
InterlockedIncrement
GetModuleFileNameA
GetProcAddress
LoadLibraryA
GetMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
ShowWindow
UnhookWindowsHookEx
CallNextHookEx
FindWindowExA
KillTimer
SetTimer
PostMessageA
DefWindowProcA
RegisterClassExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
_initterm
free
__CxxFrameHandler
strchr
fopen
fwrite
fclose
_stricmp
malloc
_adjust_fdiv
_strlwr
??2@YAPAXI@Z
sprintf
strstr
_access
strrchr
??3@YAXPAX@Z
DllRegisterServer
DllUnregisterServer
OUyXeQQQBNeAF
fTztCVOJCDxzwu
nHFqgFHwzssQ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ