DllCanUnloAdNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5ebe976b895678fe6937cbf26a5b3272_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ebe976b895678fe6937cbf26a5b3272_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ebe976b895678fe6937cbf26a5b3272_JaffaCakes118
Size
44KB
MD5
5ebe976b895678fe6937cbf26a5b3272
SHA1
32dda32f3f21cecbf1b4498f339cc57db7ccbd50
SHA256
ce26452e01b6126375af35e13ff7eab0a167d6db346ff6c6a9cd97088ea29be7
SHA512
3b0716270528e5b943cc3d6b07fa1a355e73c07df21341baa66615ff734fa1ccac9006aa256b38e11ac7616562791c90c035f64861b21c4c36b0a7d62e7ed5aa
SSDEEP
768:ni6L+KwjgZna1YI4Lf6NVMm+Dc2FXMM0ZQpbkYTU1XOWKh:ni6L/vaPYS8m+zXn0ZibkYTFWo
Checks for missing Authenticode signature.
resource |
---|
5ebe976b895678fe6937cbf26a5b3272_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSAStartup
socket
htons
connect
ioctlsocket
gethostbyname
send
closesocket
recv
LocalFree
CreateThread
IsBadStringPtrA
GetModuleHandleA
Sleep
GetProcAddress
LoadLibraryA
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
lstrcpynA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
wsprintfA
GetWindowTextA
GetParent
ScreenToClient
GetClassNameA
PeekMessageA
CallNextHookEx
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_initterm
_adjust_fdiv
_strupr
_strdup
_CxxThrowException
??1type_info@@UAE@XZ
_onexit
__dllonexit
strchr
atoi
free
isalpha
isdigit
realloc
malloc
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
DllCanUnloAdNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ