DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3bdeca8b068eebab4cb640e992bc0014_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3bdeca8b068eebab4cb640e992bc0014_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3bdeca8b068eebab4cb640e992bc0014_JaffaCakes118
Size
44KB
MD5
3bdeca8b068eebab4cb640e992bc0014
SHA1
88aa04198c3374f906184cd6bd7db7a36255be14
SHA256
c88e65dcc371ce90263e73855801f8f4456ac277832a47a862893bd1f9a236b7
SHA512
c1704334c60c05626572cc8cd0f33deef6afce353b5bfc04ae72848f38adca91d9082ac76d5d2d2bf816a617e06207d5d33974edffac96844aca6628de71bfdf
SSDEEP
768:lotZQRH7BqSdwxvpFqQ1I+xUKgZBcMTammlXpE:lotWRH7BqSdEvpFqQ1IkUKIXamcS
Checks for missing Authenticode signature.
resource |
---|
3bdeca8b068eebab4cb640e992bc0014_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSAStartup
htons
socket
send
GetLastError
GetSystemInfo
WideCharToMultiByte
GetModuleHandleA
InterlockedDecrement
ReadFile
GetCurrentProcess
FreeLibrary
OpenProcess
GetProcAddress
DuplicateHandle
IsBadReadPtr
GetCurrentProcessId
SetLastError
GetVersionExA
Thread32Next
TerminateThread
SuspendThread
Thread32First
CreateToolhelp32Snapshot
GetCurrentThreadId
CreateFileA
LoadLibraryA
LocalFree
CloseHandle
wsprintfA
CallNextHookEx
HttpSendRequestA
HttpSendRequestW
CoCreateInstance
OleRun
SysAllocString
VariantClear
SysFreeString
GetErrorInfo
_onexit
__dllonexit
_CxxThrowException
strchr
isalpha
_strdup
_adjust_fdiv
??1type_info@@UAE@XZ
_stricmp
_strupr
_initterm
isdigit
realloc
free
malloc
wcslen
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
sprintf
GetAdaptersInfo
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ