DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2bf59b4c854640ccf96249206a7d7679_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2bf59b4c854640ccf96249206a7d7679_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2bf59b4c854640ccf96249206a7d7679_JaffaCakes118
Size
126KB
MD5
2bf59b4c854640ccf96249206a7d7679
SHA1
a599eb65f86b31cc282e80924123c666a8a6b2d8
SHA256
1d481635d48335a07f91daab30ed2c5c91df2633d7e385759bafd607d3184f7e
SHA512
913a255d225ca3f64172c4fb49fb9ef0688396b117ff1fe39a462b08cb59c2b66b6f950a8592d620a304b368d420192d951f14750983d45278a77e76433cb1a7
SSDEEP
3072:Hi+jsyp3dE6fua4OK/gKk2raEXsj5xFmmCZH+pLyJqYXMTtWGJ:Hi+xp3u0u2GgKk2uEcj5xFmmCZeqcFJ
Checks for missing Authenticode signature.
resource |
---|
2bf59b4c854640ccf96249206a7d7679_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect
GetKeyboardType
RegQueryValueExA
SysFreeString
SetPixel
WSACleanup
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ