DllCanUnloadNow
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
30e6ec1b6e3e0dcf97887cf18faa3cc6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30e6ec1b6e3e0dcf97887cf18faa3cc6_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
30e6ec1b6e3e0dcf97887cf18faa3cc6_JaffaCakes118
Size
21KB
MD5
30e6ec1b6e3e0dcf97887cf18faa3cc6
SHA1
8a08cc39fd756aa0b4509646a2880ce86b009a47
SHA256
19595e76a63626fd9dd1d8ce765b0b31a44eca4a80784611ae27bfddd7a82b8a
SHA512
0637bc9fc663a95c556e7dc37e3b6c3772f756d2fc44c76706f226624a13c824c919635ed6f47fbda63046e023886ba0d6768349de7d72e57b8b57a7f6bc7a11
SSDEEP
384:IhrW/NJK8q2OC8RihFC8pzbqeg/9Y423SbjdKfs+:IWE92OzEvSK42CbU
Checks for missing Authenticode signature.
resource |
---|
30e6ec1b6e3e0dcf97887cf18faa3cc6_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
CloseHandle
lstrlenA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
InternetReadFile
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
DllCanUnloadNow
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ