GetDLlVersion
Run
Sunbelt
Static task
static1
Behavioral task
behavioral1
Sample
315599cae1c809515cb2766d7e034339_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
315599cae1c809515cb2766d7e034339_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
315599cae1c809515cb2766d7e034339_JaffaCakes118
Size
24KB
MD5
315599cae1c809515cb2766d7e034339
SHA1
b840c106546df17140c0a14d1d8e42aa4685c8e9
SHA256
f96d2c6a8431504fec08ad5905372efba1e27f7ba643876b4400c98db1d278d8
SHA512
cc3ff87bb6be444a2f51344776c66b54a6aa70c2a909c375e5b1c128106f7ce29344420d13135819f970705036466ca11427b8a962f57a5b5bd7c6a82596d443
SSDEEP
192:D0+S9V2uCB93AIqSKNFhn/bfIt//WoIKlJaOx1TarV:D0+42l3AIqSKPhn/8/oKlJaOxErV
Checks for missing Authenticode signature.
resource |
---|
315599cae1c809515cb2766d7e034339_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
TerminateProcess
OutputDebugStringA
FindClose
FindNextFileA
FindFirstFileA
Sleep
DisableThreadLibraryCalls
CreateProcessA
GetLastError
EnumChildWindows
SendMessageA
GetParent
CloseDesktop
GetClassNameA
EnumDesktopWindows
PostMessageA
CreateDesktopA
OpenDesktopA
SetForegroundWindow
GetWindowThreadProcessId
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
SHGetSpecialFolderPathA
WSAStartup
connect
socket
htons
send
recv
closesocket
shutdown
inet_addr
WSACleanup
gethostbyname
setsockopt
_adjust_fdiv
_initterm
time
srand
atoi
strchr
rand
_strcmpi
realloc
sprintf
malloc
strstr
free
GetDLlVersion
Run
Sunbelt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ