_DllMain@12
load
Static task
static1
Behavioral task
behavioral1
Sample
edaa090ee0df01e163a1dc42266d14a9_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edaa090ee0df01e163a1dc42266d14a9_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
edaa090ee0df01e163a1dc42266d14a9_JaffaCakes118
Size
18KB
MD5
edaa090ee0df01e163a1dc42266d14a9
SHA1
8932537f00df11900fb234b1fbde6de52165b9b3
SHA256
3683116e99b0ee5215c194eb9c83dbaed236e8fb424ed794b15f0d67cdbfc703
SHA512
bbfdd0753490625c02a1e96002e935af38a22e37a30d4d308e94369107957fa891fde98ee1c5b04dcebb0cf7cdd0ba572f869f09c5efe73ba64d0041c642dd01
SSDEEP
384:bJ4ExjNgQARkWDqdQB0OzZ60T8U0b9n0AqeoQC:bJ4EdNmkW+k0KZ6C8U0Bn0DeoN
Checks for missing Authenticode signature.
resource |
---|
edaa090ee0df01e163a1dc42266d14a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
atoi
strchr
strncpy
malloc
free
rand
_adjust_fdiv
_initterm
srand
fopen
fwrite
sprintf
fclose
strncmp
inet_ntoa
setsockopt
__WSAFDIsSet
gethostbyname
WSACreateEvent
WSAEventSelect
send
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAGetLastError
WSACloseEvent
shutdown
WSAStartup
htonl
bind
inet_addr
listen
recv
socket
htons
ioctlsocket
connect
select
closesocket
accept
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
GlobalAlloc
Sleep
ExitThread
GetFileAttributesA
GetTickCount
WinExec
ExpandEnvironmentStringsA
lstrcatA
lstrcpyA
DeleteFileA
CreateThread
GlobalFree
GetMessageA
DispatchMessageA
TranslateMessage
wsprintfA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
_DllMain@12
load
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ