DeinitServerExtension
GetExtensionName
InitServerExtension
_ReflectiveLoader@0
Static task
static1
Behavioral task
behavioral1
Sample
955ab9c110966ff061609315e26b9c2d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
955ab9c110966ff061609315e26b9c2d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
955ab9c110966ff061609315e26b9c2d_JaffaCakes118
Size
173KB
MD5
955ab9c110966ff061609315e26b9c2d
SHA1
cc7704ecba0bc255ad4e30e0ba7eff9ab51860d2
SHA256
8212fa6de11fa5aca1442f0e45600eaccbd99e78ef4cd49e8ff56a14d85ea63b
SHA512
2140f0e73d559fffe69c7eb0dd80ea9d18ffb04af4db434d28c1d3fdf5c69648964f52460212dfee626551534c8d264bed5c159e0cc2945647a0f127cae8aef1
SSDEEP
3072:ihfHE/TM9s9n9vdpiZdNlD1vJwebwp0g51vcnSjX+:0HytdIHDNJUgaX
Checks for missing Authenticode signature.
resource |
---|
955ab9c110966ff061609315e26b9c2d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
GetLastError
WaitForSingleObject
CloseHandle
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
OutputDebugStringW
LoadLibraryExW
HeapReAlloc
FreeEnvironmentStringsW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetStringTypeW
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
HeapSize
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
ntohs
socket
setsockopt
sendto
select
recvfrom
ntohl
inet_addr
htons
htonl
getsockname
connect
closesocket
bind
DeinitServerExtension
GetExtensionName
InitServerExtension
_ReflectiveLoader@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ