DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fd38b9da44b66899e3adc41c67fe0470_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd38b9da44b66899e3adc41c67fe0470_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
fd38b9da44b66899e3adc41c67fe0470_JaffaCakes118
Size
40KB
MD5
fd38b9da44b66899e3adc41c67fe0470
SHA1
6084989ed70aa4a9d4ffcbaeca95b7f7caa1253b
SHA256
da23689befbb26fff603117e2a69d343bc143fc8244affe6517e907ee6a58c1b
SHA512
7e0bed1b4e1913b2d65741c8db94501ab19ff7e2730ddc6b6865a3077bb73ee5cc8496124959e9ceb1f74852c9efa38c3c9174763a35e0a6e5c5dcfea3d31c20
SSDEEP
384:E9JI/cGWd/Jee02GBD83xrgCYSvaRdfr0T+NkFm70+iKTyXWCKgdN75:qKE/Je8k83NRulrpNLw+iKTyXWCDD75
Checks for missing Authenticode signature.
resource |
---|
fd38b9da44b66899e3adc41c67fe0470_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
WSAStartup
htons
gethostbyname
ioctlsocket
closesocket
socket
recv
LocalFree
CreateThread
IsBadStringPtrA
GetModuleHandleA
Sleep
GetProcAddress
LoadLibraryA
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
PeekMessageA
CallNextHookEx
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
??1type_info@@UAE@XZ
_CxxThrowException
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fgets
fseek
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
atoi
free
_strdup
realloc
calloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ