DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0d40fae4687819741d00f18bde9d955e_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0d40fae4687819741d00f18bde9d955e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0d40fae4687819741d00f18bde9d955e_JaffaCakes118
Size
77KB
MD5
0d40fae4687819741d00f18bde9d955e
SHA1
beaaa7c08eef70ae1445b81b4ea6a100e8d53007
SHA256
d27423465f830e0a63dcdad947dba28790f5c26a198b7b29510475ddbb0b750d
SHA512
7579064895ceaa80f2ee561d55d1cbc0beada5eb9bdd193c592e429418d3901bf7f8b03aa152b59fd549902eac1701b271002f66edd42c7a9b8522022cb5f4b5
SSDEEP
1536:5nMMbdYcx8jkd1/ZYpcYUNgpDVDBb4Bc/vPQ/j0Mc075sGSKxEIwg8Xv7XBZ7u:5LR7xYw1OgNAoBcg0McOyK6Iwg8f7C
Checks for missing Authenticode signature.
resource |
---|
0d40fae4687819741d00f18bde9d955e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetKeyboardType
MessageBoxA
RegQueryValueExA
SysFreeString
WSACleanup
URLDownloadToFileW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ