DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
462a9030af6443f28d65d8789fc6c9df_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
462a9030af6443f28d65d8789fc6c9df_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
462a9030af6443f28d65d8789fc6c9df_JaffaCakes118
Size
51KB
MD5
462a9030af6443f28d65d8789fc6c9df
SHA1
1cf53bb8259ea276cdf0285f6c166c160976f5c4
SHA256
668d9dce4897bee98ad79f429bad69961f5ff9bc836f3eb561d5af9176cddff2
SHA512
ce7de4422e1fd2c9300c43771f7e88694c13697b1bc71869b277d9ca1508598121c213eb1333eaec0a63e6fd477b4a1b7204dda027569b5a0110841861eb4844
SSDEEP
768:0eFY9mgCR83gI5gAWExEdktxZ6Jg4X3/in92hIMPoss7foUb+BEJo/60:0em9mgC6X586/6bX3/dJossnb+D6
Checks for missing Authenticode signature.
resource |
---|
462a9030af6443f28d65d8789fc6c9df_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
GetPixel
WSACleanup
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE