GetDLlVersion
Run
Sunbelt
Static task
static1
Behavioral task
behavioral1
Sample
b29c50d7dc32ad92c900f49ed79952a2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b29c50d7dc32ad92c900f49ed79952a2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b29c50d7dc32ad92c900f49ed79952a2_JaffaCakes118
Size
24KB
MD5
b29c50d7dc32ad92c900f49ed79952a2
SHA1
b4964e55f2cf3d2ae7756d17478e39b010db318b
SHA256
797275312b8943d07142536d1443b92ba14f721863358575762dc6603d413e8d
SHA512
f927eae4e8e5aa17ff2f398278a4b428aa0c4fc5ea93893a61bdb72632fb68247195a7b5447036ed32bdc5cfe70aebd181d89bb7acffb9bf5ae5aa6a60e62f2f
SSDEEP
192:MsNGS9RWanc9Lht82SrBOUzk9m4VM8GjFVemPej8V1TqMXkp:McG8W59LhtEQA/4O82FV9PS8Vkwkp
Checks for missing Authenticode signature.
resource |
---|
b29c50d7dc32ad92c900f49ed79952a2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TerminateProcess
GetLastError
DisableThreadLibraryCalls
Sleep
CreateProcessA
OutputDebugStringA
SendMessageA
GetWindowThreadProcessId
GetClassNameA
GetParent
CloseDesktop
SetForegroundWindow
EnumDesktopWindows
PostMessageA
CreateDesktopA
OpenDesktopA
EnumChildWindows
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
WSAStartup
connect
setsockopt
socket
send
recv
closesocket
shutdown
inet_addr
gethostbyname
WSACleanup
htons
_adjust_fdiv
_initterm
time
srand
strchr
rand
atoi
realloc
sprintf
malloc
strstr
free
GetDLlVersion
Run
Sunbelt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ