DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2d4ac411a7e7e2dc63800f2294137bec_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d4ac411a7e7e2dc63800f2294137bec_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d4ac411a7e7e2dc63800f2294137bec_JaffaCakes118
Size
40KB
MD5
2d4ac411a7e7e2dc63800f2294137bec
SHA1
59a6b50833ee492127562f62976f3fb6be1d4f5c
SHA256
b4e8c432d81f0f3d1615472f75ad107b7239f0106109d2b1d59f54adc87da73a
SHA512
56cfc1e729039971d16373664fcb3ce0628b89b722be5129a5d1f26d0f9f6da3f1aad3c67471ee8b7495fef89dd608799b3dc6640989b12e840c44d016607140
SSDEEP
384:yJgUC+K509wHGx5hGULPfT1SKBh6lG9xo/m9JH2ZBU072DXl2flAHi:yeUCReCHGx5htd6s9JHyH2zKlei
Checks for missing Authenticode signature.
resource |
---|
2d4ac411a7e7e2dc63800f2294137bec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
socket
htons
ioctlsocket
gethostbyname
closesocket
recv
connect
LocalFree
CreateThread
IsBadStringPtrA
LoadLibraryA
Sleep
GetProcAddress
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
InterlockedDecrement
CloseHandle
GetModuleHandleA
CreateFileA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
ExitProcess
GetModuleFileNameA
CallNextHookEx
InternetCrackUrlA
CoInitializeEx
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
??1type_info@@UAE@XZ
_CxxThrowException
_adjust_fdiv
_initterm
_onexit
__dllonexit
ftell
fclose
fopen
fgets
fseek
malloc
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
free
_strdup
realloc
calloc
atoi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ