DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2af3088f8f5eedef3808d07266035f9c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2af3088f8f5eedef3808d07266035f9c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2af3088f8f5eedef3808d07266035f9c_JaffaCakes118
Size
75KB
MD5
2af3088f8f5eedef3808d07266035f9c
SHA1
3303dfe26751f63bd8f3c7f493e8b9c411fcf94d
SHA256
349cbcd4103c20c69c099b228264e7935a14f01e23f82dd569d63ca4ed7e83b4
SHA512
fbb8411156b0e07855925e9db96bd8b5070e731bc0a620d4cfade1141e525b51463bac1242797482df7136b2ae2af499ad4577b09d5d14dcdc23ffe45b98fa04
SSDEEP
1536:zD5TQyQ7pi1FdEpC2BsE5WIMbJQSgll1g7sf9gZT3vHhRt6oJdz+:GyeQDdE42GE59SQgUgJ3/7t6oJdz+
Checks for missing Authenticode signature.
resource |
---|
2af3088f8f5eedef3808d07266035f9c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetKeyboardType
MessageBoxA
RegQueryValueExA
SysFreeString
URLDownloadToFileW
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ