DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a5ba5dcb944b542b76f9d2a61665b48b_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a5ba5dcb944b542b76f9d2a61665b48b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a5ba5dcb944b542b76f9d2a61665b48b_JaffaCakes118
Size
40KB
MD5
a5ba5dcb944b542b76f9d2a61665b48b
SHA1
34e7ed85712256cb055f82347a7397fa10dafb58
SHA256
dca104f540d0d180fecaf403278f59ee5db66a6b1bfd02c582128cd51545a2bc
SHA512
fefb716d394cebf84ca7f38702874a8bcec7058ef931f36dc65fa91a0086df99ef2fc35bd51893aeee6bb9bb0216c607b6825aa6a78da4906fae47d9084a2c05
SSDEEP
384:adDnA7I7Duy+qxm+e0SlJSlp19Nk2YzxX2mxST0i2seaCuGNN7cJzPNkJkr2s:a87I7D0+Ql69jCi2JVXN7cJz1kL
Checks for missing Authenticode signature.
resource |
---|
a5ba5dcb944b542b76f9d2a61665b48b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
WSAStartup
htons
closesocket
gethostbyname
ioctlsocket
socket
recv
LocalFree
VirtualAlloc
CreateThread
IsBadStringPtrA
LoadLibraryA
Sleep
GetProcAddress
GetSystemInfo
IsBadReadPtr
VirtualQuery
VirtualProtect
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
DeleteFileA
GetModuleFileNameA
SetWindowsHookExA
CallNextHookEx
PeekMessageA
OleRun
CoCreateInstance
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_CxxThrowException
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fgets
fseek
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
atoi
free
_strdup
realloc
calloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ