GetDLlVersion
Run
Sunbelt
Static task
static1
Behavioral task
behavioral1
Sample
2326320ed72e8b68318c151dc827ccca_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2326320ed72e8b68318c151dc827ccca_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2326320ed72e8b68318c151dc827ccca_JaffaCakes118
Size
24KB
MD5
2326320ed72e8b68318c151dc827ccca
SHA1
9a7540ad7c33ff02675b6454fb991dc8d6ed3aec
SHA256
44d9fccb6e65b07b263482a6d7ad8e1cc1dd5d34ddc2784d1d1529b06b8eae56
SHA512
fed03847c0a01bdee9641cbc1e1f7f218a8c5f61966f288b0625d6fe160e1099981962d16d10a6c124a5ee8ad6bad9dce57029cd01a6e0d30dbbf6b6188643fb
SSDEEP
192:z0+S9V2uCB93AIqSKNFhn/bfIt//WoIKlJaOx1Taz:z0+42l3AIqSKPhn/8/oKlJaOxEz
Checks for missing Authenticode signature.
resource |
---|
2326320ed72e8b68318c151dc827ccca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
TerminateProcess
OutputDebugStringA
FindClose
FindNextFileA
FindFirstFileA
Sleep
DisableThreadLibraryCalls
CreateProcessA
GetLastError
EnumChildWindows
SendMessageA
GetParent
CloseDesktop
GetClassNameA
EnumDesktopWindows
PostMessageA
CreateDesktopA
OpenDesktopA
SetForegroundWindow
GetWindowThreadProcessId
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
SHGetSpecialFolderPathA
WSAStartup
connect
socket
htons
send
recv
closesocket
shutdown
inet_addr
WSACleanup
gethostbyname
setsockopt
_adjust_fdiv
_initterm
time
srand
atoi
strchr
rand
_strcmpi
realloc
sprintf
malloc
strstr
free
GetDLlVersion
Run
Sunbelt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ