DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a920a9f4635ff6318b5a79d2357f4eed_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a920a9f4635ff6318b5a79d2357f4eed_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a920a9f4635ff6318b5a79d2357f4eed_JaffaCakes118
Size
52KB
MD5
a920a9f4635ff6318b5a79d2357f4eed
SHA1
dbe4294dbf548daa84a2cc41897f40e361ea967c
SHA256
8af28f3e86ea46f9346d7cf824b938f32d620e6322585f9b369d0e327e475630
SHA512
5506dbe50e8a01a80a233e0554f17c01242db5224162020fa95745921db860f7ba760986d07087410547d54870fa89d8c9db504834577641d93127e5540f76a0
SSDEEP
1536:0zaoU/4w27PuNQZLIEXFu+UC5MBOl96GrAAra:0tgO7m2pIEXrBl7rPr
Checks for missing Authenticode signature.
resource |
---|
a920a9f4635ff6318b5a79d2357f4eed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSAStartup
htons
socket
send
GetSystemInfo
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
InterlockedDecrement
GetCurrentProcess
FreeLibrary
OpenProcess
CloseHandle
DuplicateHandle
GetCurrentProcessId
SetLastError
GetVersionExA
Thread32Next
TerminateThread
SuspendThread
Thread32First
CreateToolhelp32Snapshot
GetCurrentThreadId
CreateFileA
GetModuleFileNameA
GetLastError
GetProcAddress
LoadLibraryA
LocalFree
IsBadReadPtr
CallNextHookEx
wsprintfA
CreateDCA
DeleteDC
HttpSendRequestA
HttpSendRequestW
CoCreateInstance
OleRun
SysAllocString
VariantClear
SysFreeString
GetErrorInfo
_strdup
_onexit
_CxxThrowException
strchr
isalpha
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
_stricmp
_strupr
__dllonexit
isdigit
realloc
free
malloc
wcslen
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
sprintf
GetAdaptersInfo
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ