DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
29e90fd7fd16d1a24a143fe1a8b534f5_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
29e90fd7fd16d1a24a143fe1a8b534f5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29e90fd7fd16d1a24a143fe1a8b534f5_JaffaCakes118
Size
40KB
MD5
29e90fd7fd16d1a24a143fe1a8b534f5
SHA1
cbb95db09f89b6225f1b5eda2ed42604d27e8ee0
SHA256
c2a6ae8a92e12f0c163eab92a97a0a8d3f611129e7fbcff31972e8ff66456a21
SHA512
abd428f39ad604087195889bc82d42dccf69c00b439280cbf32cb9c288da10bf6245ddd2293e23af39c906b2cbc03f661dd477e9c2baf8466568642d47c51cd7
SSDEEP
768:/eZARz7CCe8GaOslMk0aMo/pCldzN4ipwM76PFnLA1mB:/eZmz7hGaO1cMo/pCldiuwMeA1mB
Checks for missing Authenticode signature.
resource |
---|
29e90fd7fd16d1a24a143fe1a8b534f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
htons
ioctlsocket
closesocket
send
WSAStartup
socket
recv
connect
gethostbyname
LocalFree
GetModuleHandleA
CreateThread
IsBadStringPtrA
Sleep
GetProcAddress
LoadLibraryA
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
GetTickCount
InterlockedDecrement
CloseHandle
GetModuleFileNameA
CreateFileA
lstrcpynA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
DisableThreadLibraryCalls
CallNextHookEx
wsprintfA
PeekMessageA
GetParent
GetForegroundWindow
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_adjust_fdiv
_strupr
_strdup
_CxxThrowException
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
strchr
atoi
free
isalpha
isdigit
realloc
malloc
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ