DllCanUnloadNow
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5365f18c1682fdfe902d0f5abb3e5d42_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5365f18c1682fdfe902d0f5abb3e5d42_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
5365f18c1682fdfe902d0f5abb3e5d42_JaffaCakes118
Size
21KB
MD5
5365f18c1682fdfe902d0f5abb3e5d42
SHA1
4118036f82bf070b2d6612cc76e11b7840168569
SHA256
b338fffc34cce98c8b470f367442669b5dbee45bd71a97ad225310eada260693
SHA512
1ccaef5f206320806d5c93cc05abf6afa3b3207d2d1d2d118925a11b3fa1675d05de11ab5be3aa11477fa3a9bcd3893e01bd74c2c560adde085a6dc75702efeb
SSDEEP
384:ktUH768VL0MbZ/ATJIOEYxI/SKGlow9mlgnM/l2LIzY423X2imqTfsL:k876wj10J0x/St9m5A42n2iBQ
Checks for missing Authenticode signature.
resource |
---|
5365f18c1682fdfe902d0f5abb3e5d42_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
CloseHandle
lstrlenA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
InternetReadFile
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
DllCanUnloadNow
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ