DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
29a0d9474b5a868c670397af5a8e4026_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29a0d9474b5a868c670397af5a8e4026_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29a0d9474b5a868c670397af5a8e4026_JaffaCakes118
Size
386KB
MD5
29a0d9474b5a868c670397af5a8e4026
SHA1
ad2f8d72a396f58ed4c6bcb530c755c868d4b5b2
SHA256
1ff97a1c7a34eaea627775c893893ae1816f82fb4b3d3927d979b5a5909d91de
SHA512
75110b49a469ba8d9be67ec833f88b76a888e2df535915d2756327a723e36d15e2157bbe0c98bb3d87c4620a45075d55e85ed50f3931de61569ed5735de12df6
SSDEEP
6144:v2tLKGZhLcwvMtOJ/8s6pL1q58wZVmd3/qD7G25EYgQsVk5VrESB:4WGz7mOJ/n6pLo5M67G25EYgQGk5Os
Checks for missing Authenticode signature.
resource |
---|
29a0d9474b5a868c670397af5a8e4026_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
GetModuleHandleA
LoadLibraryA
RaiseException
VirtualProtect
ExitProcess
GetKeyboardType
CreateWindowExA
RegQueryValueExA
RegSetValueExA
SysFreeString
VariantChangeTypeEx
WSACleanup
URLDownloadToFileW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ