DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
08bbac68e72aba2ec61b01eb58b4acd0_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
08bbac68e72aba2ec61b01eb58b4acd0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
08bbac68e72aba2ec61b01eb58b4acd0_JaffaCakes118
Size
43KB
MD5
08bbac68e72aba2ec61b01eb58b4acd0
SHA1
9db390d4c7359b48e94b8aca946207097c9a077c
SHA256
47502b61812c9f3d711add82c66dabd6d752874f058c9caa186ccd9f6423c272
SHA512
6a6b87422dc9459cf664695da461ca5475d0b9008b76ec9758afd3610500cd8a5a910c3a80ef06b80e5dc5a7d820ad8bbeb9c4e5d891ac5430a4bde01d8762ac
SSDEEP
768:FFnSSPCQbzS28pw6sus4f6yFmqTFrwpPVXMi28oN:FFnS0/SvLsus4iyFHTF8pPVXI8o
Checks for missing Authenticode signature.
resource |
---|
08bbac68e72aba2ec61b01eb58b4acd0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
WSAStartup
htons
gethostbyname
ioctlsocket
closesocket
socket
recv
LocalFree
CreateThread
IsBadStringPtrA
LoadLibraryA
Sleep
GetProcAddress
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
PeekMessageA
CallNextHookEx
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
??1type_info@@UAE@XZ
_CxxThrowException
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fgets
fseek
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
atoi
free
_strdup
realloc
calloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ