DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
89ee70b2abc8b4d3a2537ef471d7b716_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89ee70b2abc8b4d3a2537ef471d7b716_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
89ee70b2abc8b4d3a2537ef471d7b716_JaffaCakes118
Size
12KB
MD5
89ee70b2abc8b4d3a2537ef471d7b716
SHA1
c5284d94bd71da6ea7b3b4f8a832afc0d6ff95d4
SHA256
18b6b6f558e89eec556d17df6f5742ee02a9969a3f069906198fc18e27376b8c
SHA512
3689a8c66ed0e2febf5a291daa10bd93cfd8ec22c85f0c1e56cd7bcac91543f101a9f6959432b3789d5273dbc2d13c239898cd6b5fe11047a5c16cee759adc2e
SSDEEP
192:wy72w2n/+/8l22xRumP6rpNEflAgFzeZyfG/eelji0vNn8W7cIW41:wC2wyMW2IRumeEflAgFzr3eljrN8W7ce
Checks for missing Authenticode signature.
resource |
---|
89ee70b2abc8b4d3a2537ef471d7b716_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTempFileNameA
GetTempPathA
Sleep
FreeLibrary
GetProcAddress
DeleteFileA
LoadLibraryA
GetVolumeInformationA
GetModuleFileNameA
ResumeThread
SetThreadContext
GetThreadContext
WriteProcessMemory
GetModuleHandleA
lstrcatA
GetTickCount
CreateThread
CopyFileA
lstrlenA
lstrcpyA
GlobalFree
CloseHandle
GlobalAlloc
wsprintfA
RegCreateKeyA
RegCloseKey
RegQueryValueA
RegOpenKeyA
RegSetValueExA
HttpSendRequestA
InternetSetOptionA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ