DllCanUnloadNow
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
78749e4a33605d823dc006869a01fb9c_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
78749e4a33605d823dc006869a01fb9c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
78749e4a33605d823dc006869a01fb9c_JaffaCakes118
Size
21KB
MD5
78749e4a33605d823dc006869a01fb9c
SHA1
ecf9260b0f154bc635bcaba1fc5ce65a66f59389
SHA256
d1191010f5263492822a8b3e91cebe04ebe16d3521d03edc940ea09c233c8fb5
SHA512
2bf996471aeee849b402d45c104d7aa71e0c30cf8babd4cbc527d7442a5cbff87019a6e83a08af8f1c668cc444ced8c7aca58581944f9ac9e7f7a3ab43fa5a4b
SSDEEP
384:ktUH768VL0MbZ/ATJIOEYxI/SKGlow9mlgnM/l2LIzY423X2imqTfs0:k876wj10J0x/St9m5A42n2iBX
Checks for missing Authenticode signature.
resource |
---|
78749e4a33605d823dc006869a01fb9c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
CloseHandle
lstrlenA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
InternetReadFile
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
DllCanUnloadNow
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ