DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0dd50eb262085ca2ccf4cddd3de1b568_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0dd50eb262085ca2ccf4cddd3de1b568_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0dd50eb262085ca2ccf4cddd3de1b568_JaffaCakes118
Size
14KB
MD5
0dd50eb262085ca2ccf4cddd3de1b568
SHA1
53eb0a262f4ed6b69ae5aa47d79cca1ba66e9192
SHA256
245dbac2416bad7c389b339a2cbe918d9c5e9b57e01d3522e18473cfa73c5896
SHA512
48594f4e840ec61f8469e4c2df46a6509a07ef66ad11aba6fc36a3643c9db4a34bdaf16b9c8fe343796aff2afe50b215756034012132b0ceceb766e8afe5ad76
SSDEEP
192:coj6YviZupk4rZiii7jewwALTPz8WP2PWcoTWwbUW:coWMcuLrZiiifewH8WP2PWLTWwbUW
Checks for missing Authenticode signature.
resource |
---|
0dd50eb262085ca2ccf4cddd3de1b568_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
DeviceIoControl
ExitThread
GetCurrentProcessId
GetCurrentThread
GetFileTime
GetLastError
GetModuleFileNameA
GetProcAddress
GetStartupInfoA
GetSystemDirectoryA
GetTickCount
CreateProcessA
ReadFile
ReleaseMutex
ResumeThread
SetFileTime
SetThreadPriority
SetThreadPriorityBoost
Sleep
TerminateThread
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA
CreateMutexA
CreateFileA
CloseHandle
LoadLibraryA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
WSAStartup
closesocket
connect
recv
select
send
socket
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ