DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
cf20932536d630cd3c1d1d82cc1589ae_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf20932536d630cd3c1d1d82cc1589ae_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cf20932536d630cd3c1d1d82cc1589ae_JaffaCakes118
Size
81KB
MD5
cf20932536d630cd3c1d1d82cc1589ae
SHA1
bbc00e34b843d20c5e11799ec8d7f86c82cab202
SHA256
18bdc3e648e8b048561ebea2333efe754bacddf551b75be4c106b38adeadde27
SHA512
3e8c128662c972f756d6bb1cddf243e461a1cb698b5d972040b68f9a099bc862a404a9d8a956964b37b504daa2962cbcf94fcaf63bf931ab0d74c37eee5a2f28
SSDEEP
1536:Fir1bdODhmooJWaBQTFSSR/5sjA7gdna9jclZAKmcIRgWqZYjByYq2:FirPODhmTJWaBZScs0doAl6c6dqWlhq2
Checks for missing Authenticode signature.
resource |
---|
cf20932536d630cd3c1d1d82cc1589ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetKeyboardType
MessageBoxA
RegQueryValueExA
SysFreeString
URLDownloadToFileW
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ