DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
dcca9996b35f61c5e0e186c599e869b7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcca9996b35f61c5e0e186c599e869b7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dcca9996b35f61c5e0e186c599e869b7_JaffaCakes118
Size
42KB
MD5
dcca9996b35f61c5e0e186c599e869b7
SHA1
3d3b4adcae415c9d3a5770b8323d2dd004a7b1e8
SHA256
b9502e74d27bfa31111883f589b37c6e00389ea70c16c5a5e9691ef5ff937b4a
SHA512
23b1fd22651d003ec8c2f0f810e3fc1eb931b0766b19c1e70252f847c87eac6bf465a0e2a400a07e8dd839b1f169191d0219fb88f3c203699cea3ab29a47bbf2
SSDEEP
768:loPsrL04RZ5YdibmFFO/he/EvEMnTED2rravygUc04jGcf:uIL5PbQGespLzgLjGcf
Checks for missing Authenticode signature.
resource |
---|
dcca9996b35f61c5e0e186c599e869b7_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalFree
lstrcpyA
lstrlenA
CopyFileA
GetModuleFileNameA
GetTempFileNameA
GetTempPathA
Sleep
GetVolumeInformationA
GetProcAddress
LoadLibraryA
CloseHandle
SetThreadContext
GetThreadContext
WriteProcessMemory
GetModuleHandleA
lstrcatA
GetTickCount
CreateThread
HeapSize
GetStringTypeW
MultiByteToWideChar
LCMapStringW
RtlUnwind
GetModuleFileNameW
WriteFile
GetCurrentProcess
GetCurrentThreadId
DecodePointer
GetCommandLineA
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsProcessorFeaturePresent
wsprintfA
HttpSendRequestA
InternetCrackUrlA
InternetSetOptionA
HttpOpenRequestA
InternetConnectA
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ