DllCanUnloadNow
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3e8644d252e61f5cd2f304c65be863c2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e8644d252e61f5cd2f304c65be863c2_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3e8644d252e61f5cd2f304c65be863c2_JaffaCakes118
Size
20KB
MD5
3e8644d252e61f5cd2f304c65be863c2
SHA1
dfee64685c256aa0a0b2d06afcf96e7963b30ca3
SHA256
556d64b2f39334332da01c7dee86c92dd6c697d0340d42c2e5c5d073d1adc392
SHA512
67d875403372d5daac48b4a95c8c7b81e7ab2b88252cc51ee11f106e7b29271ba8763504c19e70352af4192645bf077245f154de57527817c8404437f15118cb
SSDEEP
384:U2ZPls7ufm63h4Jhr4Tdii/KJr2FPAdTNf2W4EWufs5K:U27s7uf9x4Jd4RyJU2h2WzWM
Checks for missing Authenticode signature.
resource |
---|
3e8644d252e61f5cd2f304c65be863c2_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetModuleHandleA
lstrlenA
Sleep
GlobalAlloc
GetLastError
CloseHandle
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetTickCount
lstrcmpiA
lstrcatA
CreateMutexA
ExitThread
CreateThread
DisableThreadLibraryCalls
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
HttpQueryInfoA
DllCanUnloadNow
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ