DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
P2EProc
Socksify
UnSocksify
Static task
static1
Behavioral task
behavioral1
Sample
376f0c05e3e1fccac9aa4cf5b946578d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
376f0c05e3e1fccac9aa4cf5b946578d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
376f0c05e3e1fccac9aa4cf5b946578d_JaffaCakes118
Size
84KB
MD5
376f0c05e3e1fccac9aa4cf5b946578d
SHA1
b0c767de8520684d02915df3136dcc191d1cbb3b
SHA256
e73e2b752af5874825bc17f0dc3247ce79589d2a7d390ebc4184736768c8a809
SHA512
86a3c970f5ae2dce5145e30a22a9c4c202ab489233dc5e3e56e10ceb303d403d86736fa00c31d52ab21c4bfe0e78943eba9ba5dec32dffd36f3a3ca14a0d7535
SSDEEP
1536:W9vzy76/X0D+WpRkUkbJtmwVyOJGVO8SzR:iXM+W7kUGcwVHJGcV
Checks for missing Authenticode signature.
resource |
---|
376f0c05e3e1fccac9aa4cf5b946578d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
CreateProcessA
FlushInstructionCache
OutputDebugStringA
GetModuleHandleA
SetLastError
lstrcmpA
GetCurrentProcess
FreeLibrary
LoadLibraryA
lstrcpyA
CopyFileA
WriteFile
lstrcatA
GetLastError
InitializeCriticalSection
VirtualProtect
SizeofResource
LoadResource
FindResourceA
DeleteCriticalSection
GetCurrentProcessId
GetModuleFileNameW
TlsSetValue
TlsAlloc
TlsFree
DisableThreadLibraryCalls
lstrlenW
GetShortPathNameA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
CreatePipe
ReadFile
CreateMutexA
OpenMutexA
OpenProcess
DuplicateHandle
CreateThread
LocalFree
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetSystemDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
LoadStringA
UnhookWindowsHookEx
SetWindowsHookExA
CharNextA
CharLowerA
SetTimer
CharUpperBuffA
ShowWindow
KillTimer
CallNextHookEx
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
ShellExecuteA
CoGetInterfaceAndReleaseStream
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
VariantInit
RegisterTypeLi
SysStringLen
SysAllocString
SysFreeString
VariantClear
LoadRegTypeLi
VarUI4FromStr
LoadTypeLi
ntohs
getpeername
connect
WSAConnect
send
htons
getsockopt
select
WSAGetLastError
recv
closesocket
inet_addr
gethostbyname
InternetCloseHandle
InternetOpenA
InternetConnectA
_mbclen
strlen
??1type_info@@UAE@XZ
vsprintf
_mbsstr
memmove
_mbsinc
memset
_mbslwr
_mbschr
wcslen
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
_mbsnbcmp
_ismbcdigit
atoi
_mbscmp
memcmp
strstr
_adjust_fdiv
_initterm
_onexit
fclose
fwrite
fopen
realloc
free
_purecall
_CxxThrowException
__dllonexit
malloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
P2EProc
Socksify
UnSocksify
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ