DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a7b5495cb35c32b93b25ce87cf3a58b3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a7b5495cb35c32b93b25ce87cf3a58b3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a7b5495cb35c32b93b25ce87cf3a58b3_JaffaCakes118
Size
44KB
MD5
a7b5495cb35c32b93b25ce87cf3a58b3
SHA1
a2ae37ac85457dc2c038c13ced9bb1d3001dd473
SHA256
9d747b2630319d379b6d010398e3eafbb699a5b53476868e2aa872271a203f54
SHA512
f1b00737ae35485b1a26bd26afcdd18c446622a9eebcac887b5acea9b4d25ac8fe029df05a5f57740b3d88b8a18ddc6392f6d06bc299d0855bd383c7bcc2b428
SSDEEP
384:cPmH6HrnTWX25m30CHYSwoR9lES5LKhMUOvgouZK6dZ5GpYxacylnl6CdZZQzcLn:cOHeTt5mfHUPMzeH5wDlnlPdZgw6H5
Checks for missing Authenticode signature.
resource |
---|
a7b5495cb35c32b93b25ce87cf3a58b3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSAStartup
connect
htons
ioctlsocket
gethostbyname
closesocket
recv
socket
LocalFree
CreateThread
IsBadStringPtrA
LoadLibraryA
Sleep
GetProcAddress
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetTickCount
InterlockedDecrement
CloseHandle
FindClose
FindFirstFileA
GetModuleFileNameA
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32Next
Process32First
GetPrivateProfileStringA
CreateFileA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
GetWindowTextA
IsWindow
CallNextHookEx
EnumChildWindows
GetForegroundWindow
GetClassNameA
CoInitializeEx
OleRun
CoCreateInstance
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
??1type_info@@UAE@XZ
_CxxThrowException
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fgets
fseek
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
atoi
calloc
realloc
_strdup
strstr
free
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ