DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0c195c386c66d026429a5cb04c9959c4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c195c386c66d026429a5cb04c9959c4_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0c195c386c66d026429a5cb04c9959c4_JaffaCakes118
Size
8KB
MD5
0c195c386c66d026429a5cb04c9959c4
SHA1
f0a57809ead11084efc1c8cd6fb51e2741d77d3f
SHA256
824d4db0a215dfc43aa113056aab6fa494f019bf80dd471f9bfb381bfdad8bab
SHA512
1ae34e0877b6243355370f294ad5c545a1ef49895a3ba3c14dc8be21ae772fa5d3654ed6c067a745098fd87db850e243d6211ca2041d4fe0d1a051a1e2173b39
SSDEEP
192:9N3+7khM7GmEWt9b6OgJB2c3DsPKgJ7+itK7Az:v+mQgOgBoJ7+8K
Checks for missing Authenticode signature.
resource |
---|
0c195c386c66d026429a5cb04c9959c4_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapAlloc
GetProcessHeap
GetLastError
GetModuleHandleA
VirtualAlloc
Process32Next
CloseHandle
Process32First
CreateToolhelp32Snapshot
HeapFree
ExitProcess
VirtualFree
Sleep
NtQuerySymbolicLinkObject
memmove
NtDeviceIoControlFile
memset
RtlInitUnicodeString
_allshl
NtCreateFile
NtQueryVolumeInformationFile
NtClose
_vsnprintf
NtOpenSymbolicLinkObject
HttpSendRequestA
InternetOpenA
InternetSetOptionA
InternetConnectA
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
RegQueryValueExA
RegEnumKeyA
RegOpenKeyExA
RegCloseKey
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ