DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
84ecd2f27364379e004af8d292980b7b_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
84ecd2f27364379e004af8d292980b7b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
84ecd2f27364379e004af8d292980b7b_JaffaCakes118
Size
48KB
MD5
84ecd2f27364379e004af8d292980b7b
SHA1
b598ce04be66d447b74254dd8d6e44a8862dc3c9
SHA256
5227a58f3a6f66ca0463ab141172095593fc80492cb0d44bebfb5401abe80658
SHA512
34a7a16eae7ebdeb180cbd8fde00cd5be2959e8bb7ef0514c36ab7fd2e8315581dab85cab0f33d414e995197cf7e4926f70099832140f359a0392665b7431f53
SSDEEP
768:/zCnVkG02tIZCUZRDvbu6bBUvOXZL9SKv:/zCVBBAC2Dvbu6bBU6L9SKv
Checks for missing Authenticode signature.
resource |
---|
84ecd2f27364379e004af8d292980b7b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ioctlsocket
connect
closesocket
send
WSAStartup
socket
recv
htons
gethostbyname
LocalFree
LoadLibraryA
GetModuleHandleA
IsBadStringPtrA
Sleep
GetProcAddress
GetLastError
IsBadReadPtr
VirtualQuery
GetSystemInfo
WideCharToMultiByte
GetTickCount
InterlockedDecrement
CreateThread
CloseHandle
GetCommandLineA
GetModuleFileNameA
GetCurrentProcess
lstrcpynA
MapViewOfFile
CreateFileMappingA
CreateFileA
OpenFileMappingA
FlushInstructionCache
PeekMessageA
wsprintfA
GetClassNameA
GetForegroundWindow
CallNextHookEx
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_initterm
_adjust_fdiv
_strupr
_strdup
_CxxThrowException
??1type_info@@UAE@XZ
_onexit
__dllonexit
strchr
free
isalpha
isdigit
realloc
malloc
atoi
wcslen
??2@YAPAXI@Z
sprintf
__CxxFrameHandler
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ