DllCanUnloadNow
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f9e48dd83d6d4527e627a0571e4016ec_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f9e48dd83d6d4527e627a0571e4016ec_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f9e48dd83d6d4527e627a0571e4016ec_JaffaCakes118
Size
21KB
MD5
f9e48dd83d6d4527e627a0571e4016ec
SHA1
bbe1442ffe3d0650799c09ee1d2d8533b2571a29
SHA256
cb3d3987bc9ffadaeaee5623d4654ec6c753f3f0d79f62d44c87b296637ec06f
SHA512
b7ee2bda775816618a52a9f30cb2c90e82eeecc8544f0e15c0135e68de7a56008b7211338df4605715388ab7a0c1349af67cf00f737e9a8e732b82abf2a74e52
SSDEEP
384:mg+/O4IQ8KSCR4L9cpjGgM7MkQICQsrjK1WvMb09cvY423EVQAPRfsk:mgCSa4xajHM7Mk5sa1WE0426QAp
Checks for missing Authenticode signature.
resource |
---|
f9e48dd83d6d4527e627a0571e4016ec_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
CloseHandle
lstrlenA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
InternetReadFile
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
DllCanUnloadNow
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ