GetDllModuleControlInit
StartShell
Static task
static1
Behavioral task
behavioral1
Sample
a81667d1e3587c11277caca4c9922da4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a81667d1e3587c11277caca4c9922da4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a81667d1e3587c11277caca4c9922da4_JaffaCakes118
Size
10.3MB
MD5
a81667d1e3587c11277caca4c9922da4
SHA1
9a9faabc398c9cd852a4b451cecf74a7c5972670
SHA256
0a11acdf1d74a24c2c9ac58e39566bb293450a647bc68a470aabc84a23a22f22
SHA512
ae808f8162ff60aec272df34ba1101461bdd15561adf1a1f9fa7b6543f5ed66ac3ed4f409db305b3dcbd0f2a3ac7d3d413df578a931a92d8bec4514278f78e8d
SSDEEP
98304:BT2qHT2qHT2qHT2qHT2qHT2qHT2qHT2qHT2qHT2qHT2qHT2qHT2qHT2qHT2q:
Checks for missing Authenticode signature.
resource |
---|
a81667d1e3587c11277caca4c9922da4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
htonl
WSACleanup
inet_ntoa
sendto
WSAStartup
setsockopt
send
closesocket
select
connect
gethostbyname
htons
inet_addr
socket
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile
GetStringTypeW
LoadLibraryA
SetStdHandle
GetStringTypeA
GetCurrentProcessId
SetEndOfFile
GetSystemInfo
CloseHandle
QueryPerformanceCounter
OutputDebugStringW
Sleep
CreateThread
lstrcatW
lstrlenW
lstrlenA
lstrcpyW
GetTempPathW
GetPrivateProfileStringW
CreateFileW
DeleteFileW
SetEvent
WaitForSingleObject
CreateEventW
WideCharToMultiByte
GetTickCount
GetVersionExW
InterlockedExchange
GetACP
GetLocaleInfoA
InitializeCriticalSection
DeleteCriticalSection
HeapAlloc
VirtualProtect
HeapFree
GetProcAddress
GlobalFree
GlobalAlloc
GetCurrentProcess
TerminateProcess
GetLastError
SetFilePointer
ReadFile
CreateProcessW
GetCurrentThreadId
LoadLibraryW
MultiByteToWideChar
ExitProcess
RtlUnwind
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
GetSystemTimeAsFileTime
GetModuleFileNameA
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
FlushFileBuffers
RegisterClassExW
ShowWindow
UpdateWindow
GetMessageW
DispatchMessageW
wsprintfW
TranslateMessage
GetWindowLongW
GetClientRect
SetWindowLongW
PostQuitMessage
DefWindowProcW
CreateWindowExW
CoInitialize
CoCreateInstance
OleInitialize
CoGetClassObject
OleSetContainedObject
CoUninitialize
VariantClear
SysAllocString
VariantInit
GetDllModuleControlInit
StartShell
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ