DLLGetDocumentation
DllCanUnloadNowA
DllCanUnloadNowW
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
4d60d33fa3a26e086401904362c5d263_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d60d33fa3a26e086401904362c5d263_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d60d33fa3a26e086401904362c5d263_JaffaCakes118
Size
43KB
MD5
4d60d33fa3a26e086401904362c5d263
SHA1
335427830a5a2aa02a4d4d962c0603211b2a5911
SHA256
45c6ee8ff11491f41de49a6feefb7d7bca7b88f2d1552a33e6635d970d526f39
SHA512
4b98bc713206e359c98cbec981a44d2b0aaff207a782e5c8076786e496e97cc309b4c6556fe923826bdb4fca033510b8819a0fde8cc7956a8b0627f335f6211b
SSDEEP
768:qmn7oMw/Gof1b4scJgo7h6KAOXHarROw3JUg6a4WSk/5K88+Ffwb01:Zn++ofmrj41OK52DWSk/2Sfwb
Checks for missing Authenticode signature.
resource |
---|
4d60d33fa3a26e086401904362c5d263_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
RegSetValueExW
SHGetSpecialFolderPathW
PathMatchSpecW
WinHttpOpen
gethostbyname
DLLGetDocumentation
DllCanUnloadNowA
DllCanUnloadNowW
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE