DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5d24ababed50e96c2469b0683cb97141_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d24ababed50e96c2469b0683cb97141_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d24ababed50e96c2469b0683cb97141_JaffaCakes118
Size
186KB
MD5
5d24ababed50e96c2469b0683cb97141
SHA1
fc050107d1d567ea43d422b4f8037f33eebcdeae
SHA256
679ab0806931fc408dc3661d436a7ff4d872542a3143e6f345bc0ad32661058c
SHA512
a7ab10bdcbb66aa5ce3ec9375299995bcb117254a503d92651dd186a76b1b6c611117ecf2f97b531acb889a7f3db6bf4bbabf823fdba8446ca26f7db9ff320af
SSDEEP
3072:oNBkiy5cg3iL/JvZEHUGlcDSWIRsU2ZIGKLvtQkWjiCe1+iX5xJ0t0DWfg+WW8Fn:kk/xSFtGylqsU2ZOy7e1XHmte4oFX1we
Checks for missing Authenticode signature.
resource |
---|
5d24ababed50e96c2469b0683cb97141_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
VirtualProtect
ExitProcess
GetKeyboardType
MessageBoxA
RegQueryValueExA
SysFreeString
WSACleanup
URLDownloadToFileW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ