DllMain
DuAbortDownload
DuBeginDownload
DuDoDetection
DuInitializeA
DuInitializeW
DuUninitialize
SetEstimatedDownloadSpeed
Static task
static1
Behavioral task
behavioral1
Sample
49c15939e33322c03513e8e048377e19_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
49c15939e33322c03513e8e048377e19_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
49c15939e33322c03513e8e048377e19_JaffaCakes118
Size
39KB
MD5
49c15939e33322c03513e8e048377e19
SHA1
0330a1fb7851200d7f84aab61ccc87cc2bbebfee
SHA256
8e6d7e834ccc657a97929c35c8e7c91a5a3064505b75103a7be93d1b11b357c2
SHA512
62dfacf281d3515f671ea687d1bd9b10c840800bbb0ccf3dd74604e0b7ee7270b201633bdf258dad4d86ae3bef35f75458960b9cafe8b0a1a5f212cebf696a56
SSDEEP
768:I9Uo0KdSsjrKSWuGdviE+Z4CPlh6aKRpsf2IHVzcLOk4IRc7D:Vo0MzGuv42hwgOIxcLV4I
Checks for missing Authenticode signature.
resource |
---|
49c15939e33322c03513e8e048377e19_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
wsprintfA
RegCloseKey
StrStrIA
InternetOpenA
DllMain
DuAbortDownload
DuBeginDownload
DuDoDetection
DuInitializeA
DuInitializeW
DuUninitialize
SetEstimatedDownloadSpeed
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE