DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a04ba6a83257df8ec78215785f7f5b9a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a04ba6a83257df8ec78215785f7f5b9a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a04ba6a83257df8ec78215785f7f5b9a_JaffaCakes118
Size
119KB
MD5
a04ba6a83257df8ec78215785f7f5b9a
SHA1
389c812c51a2c03b80ea809aa28e28103b81ddd5
SHA256
84254d0d7a05ecea36d26e14c3e6a4c511659be96f31a2408d917f51c52c3b19
SHA512
ffbe8c37f49396619dec2d7117c4d746fba6442bde9d5967f25388a795d7260e011793f93d835eceae152dd76bf1cb2f41df7e4713a980b742d77492367f7a29
SSDEEP
1536:q8ngBLo+uWmF+lMgMsrwsni+PUgjA6V53toVCws41G9xh+bfhr45w2qJX:rngBwVFpzkViaUJctthkV45w2k
Checks for missing Authenticode signature.
resource |
---|
a04ba6a83257df8ec78215785f7f5b9a_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
recv
getservbyname
htons
connect
closesocket
send
WSAStartup
WSACleanup
inet_addr
gethostbyname
gethostbyaddr
WSAGetLastError
socket
RaiseException
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetProcAddress
GetModuleHandleA
GetStringTypeA
lstrcmpiA
GetModuleFileNameA
GetModuleHandleW
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
SetThreadLocale
GetThreadLocale
GetVolumeInformationA
GetWindowsDirectoryA
InterlockedExchange
GetLocaleInfoA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
GetProcessHeap
ReadFile
lstrlenA
HeapFree
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
SetFilePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
HeapReAlloc
ExitThread
CloseHandle
ResumeThread
CreateThread
DeleteFileA
MoveFileA
GetCurrentThreadId
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
HeapSize
ExitProcess
VirtualFree
HeapCreate
HeapDestroy
WriteFile
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
CharNextW
CharNextA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoCreateInstance
SysAllocString
SysStringLen
LoadRegTypeLi
DispCallFunc
VariantClear
VariantInit
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysFreeString
PathRemoveFileSpecA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ