DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0a102db9e8c0eacb8b35cf744855e03e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0a102db9e8c0eacb8b35cf744855e03e_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
0a102db9e8c0eacb8b35cf744855e03e_JaffaCakes118
Size
48KB
MD5
0a102db9e8c0eacb8b35cf744855e03e
SHA1
3ad17e95196e3c329d90d08bfb700f0d2e8a325b
SHA256
e504c01c6cc8f9a7f13b2cf24c20a469a6bd6dea94ba3811db2c940335dc4753
SHA512
75d313637ee8e60532c642f358e86f8a300d02813c21e5a32963254131538cd0465234e22d42859d1199c61ffbee4a419d191fc2e0b4ce21a68728c1240bc481
SSDEEP
768:60pIHJP7fcoCP/CQ7vsiZWtmEpkavbIhmJgqgLa1A:60+F70ooaQ7vsuW8KIhvXLam
Checks for missing Authenticode signature.
resource |
---|
0a102db9e8c0eacb8b35cf744855e03e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowsDirectoryA
GetSystemDirectoryA
CreateProcessA
WinExec
LoadLibraryA
GetLocalTime
CreateThread
VirtualAlloc
InterlockedIncrement
GetModuleFileNameA
CloseHandle
CreateMutexA
GetLastError
GetProcAddress
CreateWindowExA
ShowWindow
PostMessageA
KillTimer
SetTimer
DefWindowProcA
RegisterClassExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowsHookExA
UnhookWindowsHookEx
FindWindowExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
free
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z
strchr
_stricmp
fopen
fwrite
fclose
_initterm
malloc
_adjust_fdiv
strrchr
sprintf
__CxxFrameHandler
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ