DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5effd0bb3217aad52f5a41e2bc22f919_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5effd0bb3217aad52f5a41e2bc22f919_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5effd0bb3217aad52f5a41e2bc22f919_JaffaCakes118
Size
128KB
MD5
5effd0bb3217aad52f5a41e2bc22f919
SHA1
9969f70fa4581d01d4dd69aff2b1822ad78167f2
SHA256
b626497e88b97911c470f3b419406c43a78d7c2e0bb39a59c53da83dc9fcbce9
SHA512
b4deee10b3addde07b05a81c9c4720b508537e2dd20c9b9f481ee447b0c75ad8a39bcc903ff93960c06128e130bdd367dc92f6a0db142131dc39078303ef606d
SSDEEP
3072:FRTD/MjegUmbgmLq3qq62c8wcymCri/q2gtkIdZre:FoU+g4HmCri/q2cFdZ
Checks for missing Authenticode signature.
resource |
---|
5effd0bb3217aad52f5a41e2bc22f919_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect
GetKeyboardType
RegQueryValueExA
SysFreeString
SetPixel
WSACleanup
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ