DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
deb00fffbf276ddb042d647d14fd0232_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
deb00fffbf276ddb042d647d14fd0232_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
deb00fffbf276ddb042d647d14fd0232_JaffaCakes118
Size
12KB
MD5
deb00fffbf276ddb042d647d14fd0232
SHA1
adc612efb7845cfdaca8207c5ef48b331200f5d9
SHA256
148e7ce995aaf2f6bc0a68e8d38b4f71f7e4905b0d790912a74a3c08fb7165b3
SHA512
b4f89a0d4b91a4dd669c876d935a38984aa53941254e29180afd10b76499d9d4f924ea80caa07f936253dd8bcd6fc1e46935b3a8028d5e00fd846f321d9af8d3
SSDEEP
192:By72w2n/+/8l22xRumP6rpNEflAgJa2B1r/lelji0vRU6xW7cIW41:BC2wyMW2IRumeEflAgJa2B1xeljrLW75
Checks for missing Authenticode signature.
resource |
---|
deb00fffbf276ddb042d647d14fd0232_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTempFileNameA
GetTempPathA
Sleep
FreeLibrary
GetProcAddress
DeleteFileA
LoadLibraryA
GetVolumeInformationA
GetModuleFileNameA
ResumeThread
SetThreadContext
GetThreadContext
WriteProcessMemory
GetModuleHandleA
lstrcatA
GetTickCount
CreateThread
CopyFileA
lstrlenA
lstrcpyA
GlobalFree
CloseHandle
GlobalAlloc
wsprintfA
RegCreateKeyA
RegCloseKey
RegQueryValueA
RegOpenKeyA
RegSetValueExA
HttpSendRequestA
InternetSetOptionA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ