DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d1b25ecbf45aac1c8ab52f68a8efe6a7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d1b25ecbf45aac1c8ab52f68a8efe6a7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d1b25ecbf45aac1c8ab52f68a8efe6a7_JaffaCakes118
Size
13KB
MD5
d1b25ecbf45aac1c8ab52f68a8efe6a7
SHA1
45b390efd9746e3a7fd90844574183e5d46adc42
SHA256
169807984ac843c2389c2ae57aab1e4d17ccec737e53144561778cd658160fe8
SHA512
b42029e45d28c2640434d3c1772b223fe02a2d1735d2397a4fa1b00fc6b5b61b3174655119dd4ba28079c8a3790dd4d5b26dd6755993791dc77846211fd82045
SSDEEP
192:BKl6aE8q9n5D6JmDHTHgPtM5VDAFmeTYALTiVWwbUWMtUi:BPDkmTAPKzeTmWwbUWMei
Checks for missing Authenticode signature.
resource |
---|
d1b25ecbf45aac1c8ab52f68a8efe6a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
DeviceIoControl
ExitThread
GetCurrentProcessId
GetCurrentThread
GetFileTime
GetLastError
GetModuleFileNameA
GetProcAddress
GetStartupInfoA
GetSystemDirectoryA
LoadLibraryA
CreateProcessA
ReleaseMutex
ResumeThread
SetFileTime
SetThreadPriority
SetThreadPriorityBoost
Sleep
TerminateThread
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA
CreateMutexA
CreateFileA
CloseHandle
ReadFile
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
WSAStartup
closesocket
connect
recv
select
send
socket
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ