DllCanUnloadNow
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a88620f14c100e3b92f37015b0793f15_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a88620f14c100e3b92f37015b0793f15_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a88620f14c100e3b92f37015b0793f15_JaffaCakes118
Size
21KB
MD5
a88620f14c100e3b92f37015b0793f15
SHA1
64926d530a3b88e9bb161950da26bacd69bb4873
SHA256
405c92c6529c1f038717aefd079f7c124641ea3645163c41746b38346effb8ff
SHA512
1e75d56f7649e391104fbf0a960abc94ab0f52ae6e90a852d050914742075ced208e21009b38fd66e4940b6a9dc65f9402e6c17e3eafa9631ba2f1d4763f9b61
SSDEEP
384:IhrW/NJK8q2OC8RihFC8pzbqeg/9Y423SbjdKfsc:IWE92OzEvSK42CbK
Checks for missing Authenticode signature.
resource |
---|
a88620f14c100e3b92f37015b0793f15_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
CloseHandle
lstrlenA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
InternetReadFile
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
DllCanUnloadNow
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ