DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a626370a946cb9df6e6d6a9a3b50f7e4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a626370a946cb9df6e6d6a9a3b50f7e4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a626370a946cb9df6e6d6a9a3b50f7e4_JaffaCakes118
Size
40KB
MD5
a626370a946cb9df6e6d6a9a3b50f7e4
SHA1
a607a1ea1263652f63281a392816376b6ba1b837
SHA256
75de61e0453f51d134333bce4724657014acf54764dd3cf11363bda39faae455
SHA512
3329dae2cf365f5924bcad7c1d19b920bbbc971dfda5f3654698ad84bde60b0cd59c97540b71f33da7dd2c4c1cb83b47305c9030ea90c12e86eecc0f6870df88
SSDEEP
768:dBIiR5o5nandJgLN/E5ErPuyOpfLDxwA:XR5kang5/tbhOJ+A
Checks for missing Authenticode signature.
resource |
---|
a626370a946cb9df6e6d6a9a3b50f7e4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
htons
socket
gethostbyname
ioctlsocket
closesocket
connect
recv
Sleep
GetVersionExA
GetProcAddress
GetWindowsDirectoryA
GetSystemInfo
LoadLibraryA
GetLastError
CreateThread
IsBadStringPtrA
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
CloseHandle
VirtualQuery
CreateFileA
GetTempPathA
IsBadReadPtr
OpenProcess
GetCurrentProcessId
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
WinExec
GetModuleFileNameA
ReleaseMutex
CreateMutexA
VirtualAlloc
GetModuleHandleA
LocalFree
CallNextHookEx
InternetCrackUrlA
OleRun
CoCreateInstance
CoInitializeEx
SysFreeString
SysAllocString
GetErrorInfo
VariantClear
_initterm
_onexit
__dllonexit
malloc
fclose
free
ftell
_CxxThrowException
??1type_info@@UAE@XZ
_strdup
??2@YAPAXI@Z
fopen
_adjust_fdiv
wcslen
realloc
fseek
fgets
__CxxFrameHandler
??3@YAXPAX@Z
calloc
atoi
sprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ