CtFxPlugInMgrEntryPoint
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
444e1559e97729d11815b53cc19667ab_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
444e1559e97729d11815b53cc19667ab_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
444e1559e97729d11815b53cc19667ab_JaffaCakes118
Size
116KB
MD5
444e1559e97729d11815b53cc19667ab
SHA1
0f7b19f4a02a7f5d3087a0c9ec82fe9af018a3c5
SHA256
b2ac76741a4938e67fd6948d7b0a03c8528ea0017a66e9cb3e5acea9f062e36d
SHA512
04ce7b742f33d97059f684b0935d793b0e967f155ec99a753573e22e09e74b86938962a31185e7b3670c57f5db439c7509b6f905f4f9e496184e17199387b9dd
SSDEEP
3072:Pl37TRGQt0pM3DXrKpFrEDtwRiJdMRruhGX:PVkfSboSbMR6k
Checks for missing Authenticode signature.
resource |
---|
444e1559e97729d11815b53cc19667ab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
_initterm
_assert
swprintf
_vsnwprintf
malloc
strstr
free
printf
wprintf
_beginthreadex
_endthreadex
_chkesp
Sleep
GetFullPathNameW
OutputDebugStringW
LoadLibraryW
SetLastError
HeapFree
WaitForSingleObject
SetEvent
CloseHandle
CreateEventW
CreateMutexW
HeapAlloc
GetProcessHeap
CreateFileW
MultiByteToWideChar
IsBadCodePtr
ReleaseMutex
WaitForMultipleObjects
GetProcAddress
GetLastError
FreeLibrary
WideCharToMultiByte
DeviceIoControl
IsWindow
BroadcastSystemMessageW
RegisterWindowMessageW
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
SHGetFolderPathW
StrRStrIW
CtFxPlugInMgrEntryPoint
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ