DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c0d41b498c2e1614a23c5a364b9e0a35_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c0d41b498c2e1614a23c5a364b9e0a35_JaffaCakes118
Size
160KB
MD5
c0d41b498c2e1614a23c5a364b9e0a35
SHA1
36b77b58470dfb9a0e4e27b89ebb520f00f63b71
SHA256
36c347c4f3250aebf566c0b6692df4c958dcb39a3906ecb2b56c0b9ab73e2d5a
SHA512
4152f2812990a66cb0ec279c16ce234f3ad67303baf900073ac705c6d4b32240df15eb5d86e5b450920980b2dbc0ba3c9b32753961f4196bec11d7b8a86d2449
SSDEEP
3072:5/sZHcLTiozG5Tgxx042IjB+hzNoiPJcHwYWWfZ:NZSgxxz2Iw910w7W
Checks for missing Authenticode signature.
resource |
---|
c0d41b498c2e1614a23c5a364b9e0a35_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
URLDownloadToFileA
send
WSACleanup
WSAGetLastError
connect
gethostbyname
__WSAFDIsSet
inet_addr
ioctlsocket
socket
WSAStartup
closesocket
recv
gethostbyaddr
htons
select
SetEndOfFile
FlushFileBuffers
IsBadWritePtr
IsBadReadPtr
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
DisableThreadLibraryCalls
HeapDestroy
lstrcpyA
lstrcatA
GetProcAddress
LoadLibraryA
CloseHandle
GetVersionExA
SetFileTime
CreateFileA
GetFileTime
OpenFile
DeleteFileA
GetSystemTime
CreateThread
GetCurrentThreadId
RtlUnwind
RaiseException
GetFileType
GetStdHandle
SetHandleCount
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
CompareStringW
CompareStringA
SetFilePointer
ReadFile
IsBadCodePtr
WriteFile
SetEnvironmentVariableA
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
HeapFree
GetLocalTime
TlsGetValue
SetLastError
TlsFree
TlsAlloc
GetStartupInfoA
TlsSetValue
HeapAlloc
TerminateProcess
GetCPInfo
GetTimeZoneInformation
HeapSize
ExitProcess
GetCurrentProcess
HeapReAlloc
GetCommandLineA
GetVersion
GetClassNameA
EnumThreadWindows
LoadStringA
IsWindow
CharNextA
RegEnumKeyExA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyA
RegDeleteKeyA
RegQueryInfoKeyA
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
ShellExecuteA
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
LoadRegTypeLi
SysStringLen
SysAllocString
RegisterTypeLi
VarUI4FromStr
SysFreeString
LoadTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ