EMBUDP_CLOSE
EMBUDP_INIT
EMBUDP_NAME
EMBUDP_PREREAD
EMBUDP_READ
EMBUDP_SEND
EMBUDP_TERMINALREAD
Static task
static1
Behavioral task
behavioral1
Sample
a18acce7db9c8d799e2f99e40d62d689_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a18acce7db9c8d799e2f99e40d62d689_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a18acce7db9c8d799e2f99e40d62d689_JaffaCakes118
Size
118KB
MD5
a18acce7db9c8d799e2f99e40d62d689
SHA1
cf3e96a70a5cac8f9a9c0100d49c109653124396
SHA256
916237bfa3b862d61369076a9b20c2dce1de32d22c094a23c40a87c69778d2ea
SHA512
218fc704f2c1cbae4110a8247284d2b4505f20691e0e4d601733d0aebd8ea0957fa637de05d8a5fafae5aef10836e5387e8a8710aac8b5d397686fdc85354b3e
SSDEEP
1536:w2vccgk7VO7R6W0FPRjtS7mH0Hid9fVrwq4JAfzm2PEUTPDhy6HqaICaf21a1ok/:Ku7q8jtS6HHPfVruJAS2VPDDKdGa1ok/
Checks for missing Authenticode signature.
resource |
---|
a18acce7db9c8d799e2f99e40d62d689_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
recv
send
select
__WSAFDIsSet
closesocket
WSAStartup
getprotobyname
socket
WSACleanup
htons
setsockopt
gethostname
gethostbyname
htonl
bind
connect
WSAGetLastError
TlsAlloc
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
CreateEventA
CloseHandle
WaitForSingleObject
SetEvent
GetCurrentThread
GetTickCount
ResetEvent
Sleep
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
EMBUDP_CLOSE
EMBUDP_INIT
EMBUDP_NAME
EMBUDP_PREREAD
EMBUDP_READ
EMBUDP_SEND
EMBUDP_TERMINALREAD
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ