DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
19e4c9b94ed7f13750f0272a1e3651b9_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
19e4c9b94ed7f13750f0272a1e3651b9_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
19e4c9b94ed7f13750f0272a1e3651b9_JaffaCakes118
Size
40KB
MD5
19e4c9b94ed7f13750f0272a1e3651b9
SHA1
602c377c40aa25f6db50c68218f789e081241919
SHA256
c7d5156fdc009b7e87498b925a59ca6925299c06fb6f710402366ff429738508
SHA512
00af9f41287c5e70fe1e1c81abc14cb12b146e19189c4d8ae8c756aba449c8723797ad9b6991f3f691f6f99b7a7b5ccd98e4dc069cbce516885cb89a4e6567bf
SSDEEP
768:ciWUY3tKYhspoXQTunUekldecf2uVijEq8cfF:ciWUYdxsCXQTunUbDecf2XwqtN
Checks for missing Authenticode signature.
resource |
---|
19e4c9b94ed7f13750f0272a1e3651b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
WSAStartup
htons
gethostbyname
ioctlsocket
closesocket
socket
recv
LocalFree
CreateThread
IsBadStringPtrA
GetModuleHandleA
Sleep
GetProcAddress
LoadLibraryA
GetLastError
ExitProcess
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
DisableThreadLibraryCalls
GetParent
CallNextHookEx
PeekMessageA
GetForegroundWindow
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
??1type_info@@UAE@XZ
_CxxThrowException
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fgets
fseek
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
atoi
calloc
free
_strdup
realloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ