DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c2668b61588ef9b7fe488cd0551a1a5e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c2668b61588ef9b7fe488cd0551a1a5e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c2668b61588ef9b7fe488cd0551a1a5e_JaffaCakes118
Size
40KB
MD5
c2668b61588ef9b7fe488cd0551a1a5e
SHA1
b289ce3e3e3106d6551181f17897523eb333af54
SHA256
646fb5832c5f0768f8eb6b7b3c1a745d9cb4f0b69a36415a284ba147999faed0
SHA512
c419e7b39dc7532069839116309fe47c91ca206a870584586c41c6aa567846632474bffaf20955546775d15bf5f1a72e8994a2036897ce713bce5be2c523d1ed
SSDEEP
384:FH1F+oF19IetBKqe0Sgm6XReDl0mShbxZOixWBMfK0bEscDtRmQRKt3uST:FVf1OaKqQY5g0fBEpfVYuo
Checks for missing Authenticode signature.
resource |
---|
c2668b61588ef9b7fe488cd0551a1a5e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
htons
ioctlsocket
gethostbyname
closesocket
recv
socket
LocalFree
CreateThread
IsBadStringPtrA
LoadLibraryA
Sleep
GetProcAddress
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
CallNextHookEx
CoInitializeEx
OleRun
CoCreateInstance
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
??1type_info@@UAE@XZ
_CxxThrowException
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fgets
fseek
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
atoi
free
_strdup
realloc
calloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ