DllCanUnloadNow
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
05117880ba0b7c12b60067c5100a4c43_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05117880ba0b7c12b60067c5100a4c43_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
05117880ba0b7c12b60067c5100a4c43_JaffaCakes118
Size
21KB
MD5
05117880ba0b7c12b60067c5100a4c43
SHA1
1985553575896551bc238c0116c7690704a9387f
SHA256
ab085a299878d0b22acac16a9e648e2374c15687bb02505c85068d1a666f11d3
SHA512
287fd5770aaf48704300fca046de094ddb08d061e3b884242091649b8e23caeec811566f36c2b84768a50dbf869719fe92e9f0b7d1bb678d1c455d165264cfe9
SSDEEP
384:HdjFdh8b8I2m0zTbzqE4ox7JZe8UptZ6yxE4Y423hbgu1xfsk:HBPh86lT/qE4oxlZcqyA421gW
Checks for missing Authenticode signature.
resource |
---|
05117880ba0b7c12b60067c5100a4c43_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
CloseHandle
lstrlenA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
InternetReadFile
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
DllCanUnloadNow
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ