DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
rcYnTBrXX
Static task
static1
Behavioral task
behavioral1
Sample
0f1a65e3867d6d318ec633cb39fb0eb5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f1a65e3867d6d318ec633cb39fb0eb5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0f1a65e3867d6d318ec633cb39fb0eb5_JaffaCakes118
Size
44KB
MD5
0f1a65e3867d6d318ec633cb39fb0eb5
SHA1
e509f1c6209c9be81cf6872a5e6002a3366140d5
SHA256
e5629ef0ca318a7727da2705e23b5f373f5475d48d211730f01bc5e77b4b0199
SHA512
e27674d52fec679ba5b76c6d587ec303c3266e2b7020012a252fe7bb82dceb3f8e79d8ba058e20935bfe660d87ce4bc62a148af1475ac80ed5323bd41794b677
SSDEEP
768:Jz94pkavaVF4I2UHyYPSNLH6HFxBRVWw9gLa1t:zLeIoWQwKLav
Checks for missing Authenticode signature.
resource |
---|
0f1a65e3867d6d318ec633cb39fb0eb5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
CreateMutexA
GetLastError
InterlockedIncrement
CreateThread
VirtualAlloc
GetModuleHandleA
GetLocalTime
LoadLibraryA
GetProcAddress
GetModuleFileNameA
ShowWindow
CallNextHookEx
KillTimer
SetTimer
UnhookWindowsHookEx
GetMessageA
CreateWindowExA
DispatchMessageA
RegisterClassExA
SetWindowsHookExA
FindWindowExA
PostMessageA
DefWindowProcA
TranslateMessage
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CoCreateGuid
free
_except_handler3
strrchr
strchr
fopen
fwrite
fclose
_stricmp
__CxxFrameHandler
_initterm
malloc
_adjust_fdiv
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
GetModuleBaseNameA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
rcYnTBrXX
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ