GetDLlVersion
Run
Static task
static1
Behavioral task
behavioral1
Sample
aec8d5bdede67dbc2dc75cf5dabfb5a6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aec8d5bdede67dbc2dc75cf5dabfb5a6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aec8d5bdede67dbc2dc75cf5dabfb5a6_JaffaCakes118
Size
52KB
MD5
aec8d5bdede67dbc2dc75cf5dabfb5a6
SHA1
ddd7fc13fc8f2c995a95de29cf856eafa3f8abae
SHA256
1bd76fe6c3cc30002794d75a42cdf6b8cbff7aed1f2c14ee00823216f0da32cd
SHA512
f85edfaf019f4041cf59b8e8dc9ea3ff52586dcecebfeb21abe6ff54bac88dda6916c789357981e7c2875f0285ac4c7bc5f815c4dba7e5de15f1f8a29b62f86a
SSDEEP
768:cYYH1+ztmssUaYrQp32eTxvqiiCeKrXkoI3uqiB9AQgQ91Utb5As4q9b1B:cZQrJMV2eTxDkKQojAAWtbWsj
Checks for missing Authenticode signature.
resource |
---|
aec8d5bdede67dbc2dc75cf5dabfb5a6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
GetModuleFileNameA
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateProcessA
WaitForSingleObject
GetLastError
OutputDebugStringA
TerminateProcess
Sleep
RtlUnwind
LCMapStringW
LCMapStringA
SetEndOfFile
LoadLibraryA
HeapFree
HeapAlloc
GetFileAttributesA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
CloseHandle
WriteFile
ReadFile
GetProcAddress
GetModuleHandleA
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
InterlockedDecrement
InterlockedIncrement
SetStdHandle
FlushFileBuffers
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
CreateDesktopA
CloseDesktop
GetUserNameA
shutdown
closesocket
recv
send
inet_addr
socket
setsockopt
connect
WSAStartup
gethostbyname
WSACleanup
htons
GetDLlVersion
Run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ