DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
214d3a0c1589b4052c1f257427286e16_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
214d3a0c1589b4052c1f257427286e16_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
214d3a0c1589b4052c1f257427286e16_JaffaCakes118
Size
43KB
MD5
214d3a0c1589b4052c1f257427286e16
SHA1
9580f137609f8ed223f658fc6b12fb7454d3b746
SHA256
8d7e1d34447ead436149788980f604c34bbc8a7ca603943b28b272cafbf663e0
SHA512
eea83af564418c1cf66f5f12a84868ad646a9206774728af1dfa1380481fa3ad88a59da199b956725697445bba1c30d600b3e79044eb3d13cd2108745df47376
SSDEEP
384:4oYqVlCL65zttee02z0+hthzkeDSqY+kzN2iUyTyF7kp6/+vmqFDAK59yqlBY:Iqz9tte8w+/aeLwHUyTGksmvHFeqlBY
Checks for missing Authenticode signature.
resource |
---|
214d3a0c1589b4052c1f257427286e16_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
WSAStartup
htons
gethostbyname
ioctlsocket
closesocket
socket
recv
LocalFree
GetModuleHandleA
CreateThread
IsBadStringPtrA
Sleep
GetProcAddress
LoadLibraryA
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
DisableThreadLibraryCalls
GetParent
CallNextHookEx
PeekMessageA
GetForegroundWindow
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
??1type_info@@UAE@XZ
_CxxThrowException
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fgets
fseek
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
atoi
calloc
free
_strdup
realloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ