DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1866b4607b755039c4908f0b3181c557_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1866b4607b755039c4908f0b3181c557_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1866b4607b755039c4908f0b3181c557_JaffaCakes118
Size
73KB
MD5
1866b4607b755039c4908f0b3181c557
SHA1
751b4ad7781122084998c3368224b9a928a7eff8
SHA256
d69cfaf2313a9fb6829341a655f6c8b4f1967e495ad33e7088ab3d7da43d558f
SHA512
c33f968c8b7efeba63f3f1bea2a63d2f98352be758019781f02666f723a3aed16eadd8cda807bc091c78fc88c97df908e9ebab351b05aeabf5351f4ab786b52f
SSDEEP
1536:ThFUd7h5RQdRmvtSbetGCe9lUOxYQBmJRXBRVe5Hz:M7tQdIKSrslUOpBEX7s5T
Checks for missing Authenticode signature.
resource |
---|
1866b4607b755039c4908f0b3181c557_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetKeyboardType
MessageBoxA
RegQueryValueExA
SysFreeString
InternetReadFile
URLDownloadToFileW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ