DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
039da2ec2b6f477cbeb335725d7c5cd1_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
039da2ec2b6f477cbeb335725d7c5cd1_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
039da2ec2b6f477cbeb335725d7c5cd1_JaffaCakes118
Size
52KB
MD5
039da2ec2b6f477cbeb335725d7c5cd1
SHA1
329c034622824cfe2e563600ace294ea6048abc3
SHA256
a46cd3ae22e63fd4ff17535fa97333e1457a04c8c62fb26544b2c86c17af2cd8
SHA512
19e51abece21e2c96cf0c81375acae4a7c1ea0a9423ebc856f3fba777c36c7fd2f344f7cacbc58803ba7d13e245c7045e0ba9ec5047c171a8f40e48b0b07cd8d
SSDEEP
768:VYxzdtjDpd3hoIkTBd4dD9xjU7XzgPL74HYbB:VqfjRsd4dD9xjU7sPL74oB
Checks for missing Authenticode signature.
resource |
---|
039da2ec2b6f477cbeb335725d7c5cd1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
WSAStartup
htons
gethostbyname
ioctlsocket
closesocket
socket
recv
CreateFileA
CreateThread
IsBadStringPtrA
Sleep
LoadLibraryA
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
InterlockedDecrement
CloseHandle
CreateToolhelp32Snapshot
Process32Next
Process32First
WriteFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
ReleaseMutex
CreateMutexA
ReadFile
SetFilePointer
SetFileAttributesA
GetLastError
GetModuleHandleA
GetProcAddress
LocalFree
OpenServiceA
ControlService
StartServiceA
DeleteService
OpenSCManagerA
CreateServiceA
CloseServiceHandle
GetParent
CallNextHookEx
PeekMessageA
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_CxxThrowException
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fgets
fseek
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
atoi
calloc
free
strstr
_strdup
realloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ