DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c1a0b7abc03527b8e564295e53012b48_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c1a0b7abc03527b8e564295e53012b48_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c1a0b7abc03527b8e564295e53012b48_JaffaCakes118
Size
40KB
MD5
c1a0b7abc03527b8e564295e53012b48
SHA1
3f1658b0de26c219872e2e37f6e0c27f43559f91
SHA256
eb5e8ef9a57d26c8c98e1a905a6c9a9882b113f04cb0c8eed17169f06b01ab8b
SHA512
cf07792170eb76613fd31f2191bc524f7c5dabdda922a1b62f9d7559f2c24719a969dd926165d5ead5efc059f1a27293c17e5fb961d34e05dff616ae72a298ec
SSDEEP
768:cW8wnIpJe8GV7In45lWlbc2AXsnO/4C2zpUXuBkFR:cHKOM7ZlWlWXwO/pX+BkFR
Checks for missing Authenticode signature.
resource |
---|
c1a0b7abc03527b8e564295e53012b48_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSAStartup
ioctlsocket
htons
connect
recv
closesocket
send
socket
gethostbyname
LocalFree
CreateThread
IsBadStringPtrA
GetModuleHandleA
Sleep
GetProcAddress
LoadLibraryA
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
lstrcpynA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
CallNextHookEx
wsprintfA
PeekMessageA
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_adjust_fdiv
_strupr
_strdup
_CxxThrowException
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
strchr
atoi
free
isalpha
isdigit
realloc
malloc
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
sprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ