DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b3945d9c54f46448b1ff8e6bb2da1476_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b3945d9c54f46448b1ff8e6bb2da1476_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b3945d9c54f46448b1ff8e6bb2da1476_JaffaCakes118
Size
32KB
MD5
b3945d9c54f46448b1ff8e6bb2da1476
SHA1
90d42b164087e9bb4501065d7dd46102644a6e73
SHA256
1524b826ecbfe901697ad1b59f2d501f7cba4e2fcc9348bf22f5e87f05d97710
SHA512
3f423d8044e976445fa7af5e834015117db665342bbf9d5b41d181c044eeb884e0f48eb0695eaf6c6590f496492b105715d15696e78274fa089aff4323bc6bb1
SSDEEP
384:wVV/uMFCfgab6BZ6T2cQrWtJ+I5JT328Wi:qV/uMFCYabU6TJ+I5Jqx
Checks for missing Authenticode signature.
resource |
---|
b3945d9c54f46448b1ff8e6bb2da1476_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
ioctlsocket
recv
socket
closesocket
htons
gethostbyname
IsBadStringPtrA
Sleep
GetVersionExA
GetProcAddress
GetWindowsDirectoryA
CreateThread
LoadLibraryA
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
GetSystemDefaultLCID
GetSystemInfo
GetLastError
VirtualAlloc
MapViewOfFile
CreateFileMappingA
CreateFileA
OpenFileMappingA
WinExec
GetModuleFileNameA
ReleaseMutex
GetCurrentProcessId
OpenProcess
CloseHandle
CreateMutexA
CallNextHookEx
InternetCrackUrlA
calloc
atoi
ftell
fgets
fclose
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
free
??3@YAXPAX@Z
_strdup
realloc
sprintf
fopen
??2@YAPAXI@Z
__CxxFrameHandler
fseek
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ