DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6ee0945cfc3f72bf4d0057b182a88dcf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6ee0945cfc3f72bf4d0057b182a88dcf_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6ee0945cfc3f72bf4d0057b182a88dcf_JaffaCakes118
Size
44KB
MD5
6ee0945cfc3f72bf4d0057b182a88dcf
SHA1
77107558ae0a1d8b5c78d5d43c64478b721fb9ef
SHA256
73b4701a4d3c1fa21e767d683db11f1b55d3c3543902f80c361ab58c5527c95c
SHA512
4b6d1e43c5bedb4f742bc9978ef27f42579982a3528532fe710cb5f42d5801f4e5d0e8566df47021c4770045117a807a5a8fe87074bdb451bf3708eee11e0594
SSDEEP
768:owZokiw3wz9ll/Uq/6flr5udMEH/XBrIvkfv6HsR+:TZokB3wzDtUq/6N4HH/XFIQv6Hs
Checks for missing Authenticode signature.
resource |
---|
6ee0945cfc3f72bf4d0057b182a88dcf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
socket
htons
ioctlsocket
gethostbyname
closesocket
recv
connect
LocalFree
CreateThread
IsBadStringPtrA
LoadLibraryA
Sleep
GetProcAddress
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
InterlockedDecrement
CloseHandle
GetModuleHandleA
FindClose
FindFirstFileA
GetModuleFileNameA
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32Next
Process32First
GetPrivateProfileStringA
CreateFileA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
ExitProcess
GetWindowTextA
IsWindow
CallNextHookEx
EnumChildWindows
GetForegroundWindow
GetClassNameA
InternetCrackUrlA
CoInitializeEx
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_CxxThrowException
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_onexit
__dllonexit
ftell
fclose
fopen
fgets
fseek
malloc
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
atoi
calloc
realloc
_strdup
free
strstr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ