DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a63975300b0ab50dda46303624b503a7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a63975300b0ab50dda46303624b503a7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a63975300b0ab50dda46303624b503a7_JaffaCakes118
Size
40KB
MD5
a63975300b0ab50dda46303624b503a7
SHA1
af9adf8b6881e975a4dd6ce80d13fa6676c334ea
SHA256
5070da05dbe1fc51647b023f427bf63ec48636b5c63816edf4cdc14351834b16
SHA512
18b6ab9daa49745a929f7a0dcdf951f3e27b885788ad1cfb8136d9a94d8ed84a1b89fb115d0873997b72f9674b5341aa9f75a013a29552fe9a47d3d311a420b7
SSDEEP
384:+4J7I7Dnm6k5Ce0SYnwVRWCSfgNgM+yEUx6jmzP4/8ItaNN710XklkKW:37I7DniCQYnwVRW+bmZ4N710XkZW
Checks for missing Authenticode signature.
resource |
---|
a63975300b0ab50dda46303624b503a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
htons
closesocket
gethostbyname
ioctlsocket
recv
socket
LocalFree
VirtualAlloc
CreateThread
IsBadStringPtrA
LoadLibraryA
Sleep
GetProcAddress
GetSystemInfo
IsBadReadPtr
VirtualQuery
VirtualProtect
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
DeleteFileA
GetModuleFileNameA
CallNextHookEx
SetWindowsHookExA
CoInitializeEx
OleRun
CoCreateInstance
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_CxxThrowException
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fgets
fseek
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
atoi
free
_strdup
realloc
calloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ