DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5e44f6a9b049e2cdeaca88d732deb1ea_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e44f6a9b049e2cdeaca88d732deb1ea_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e44f6a9b049e2cdeaca88d732deb1ea_JaffaCakes118
Size
51KB
MD5
5e44f6a9b049e2cdeaca88d732deb1ea
SHA1
1fafb25c5929a787ccb062aea37875ee7bc1aaf1
SHA256
311ffc452409b5ec9626dc57efcd0be1527222a60a6b53f8df8ca53a7033b35b
SHA512
461b7168b1cd2608cc6857308a3fd965340936179dca36e0242c7c0e948b04f367f1d24a9fb618e93e817e705ed53e5c8849bb72233b454e9f02864b0789b1d9
SSDEEP
768:dZ1AzKm7gRrgBsXmRmkqv1HxjIWeXSLjRt1On:dZ1A+mGr+emRmL1HxjIgLjrs
Checks for missing Authenticode signature.
resource |
---|
5e44f6a9b049e2cdeaca88d732deb1ea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ioctlsocket
connect
closesocket
WSAStartup
socket
recv
send
htons
gethostbyname
LocalFree
LoadLibraryA
IsBadStringPtrA
Sleep
GetProcAddress
GetLastError
IsBadReadPtr
VirtualQuery
GetSystemInfo
WideCharToMultiByte
GetModuleHandleA
GetTickCount
InterlockedDecrement
CreateThread
CloseHandle
GetCommandLineA
GetModuleFileNameA
lstrcpynA
CreateFileA
DisableThreadLibraryCalls
PeekMessageA
wsprintfA
GetClassNameA
GetForegroundWindow
CallNextHookEx
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_adjust_fdiv
??1type_info@@UAE@XZ
_strupr
_strdup
_CxxThrowException
_initterm
_onexit
__dllonexit
strchr
free
isalpha
isdigit
realloc
malloc
atoi
wcslen
??2@YAPAXI@Z
sprintf
__CxxFrameHandler
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ