DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d1ff17d02ab1cd28e7ee5b2e347ce1a0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1ff17d02ab1cd28e7ee5b2e347ce1a0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d1ff17d02ab1cd28e7ee5b2e347ce1a0_JaffaCakes118
Size
40KB
MD5
d1ff17d02ab1cd28e7ee5b2e347ce1a0
SHA1
2f4aa65a0295cb41e4b47668481f08cc1234544f
SHA256
3969814cfdf0d1418d5381888649ca3459e920ca7fd0502ea5fa086979fa931b
SHA512
d220774368d4781677f6d2358c0d74088c76bb429cb0fbd427e73ae4d92da5923386d5f93d2f0ac9a2f332e1e5c5cbd470f65c2cc5389db04d5ba89b90c66206
SSDEEP
768:tvrFVuspcWaxpDlxzO1t9fQULvA/0NJ5d8:hrfpWpD3zO1/fQtMS
Checks for missing Authenticode signature.
resource |
---|
d1ff17d02ab1cd28e7ee5b2e347ce1a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
WSAStartup
htons
gethostbyname
ioctlsocket
closesocket
socket
recv
LocalFree
GetProcAddress
LoadLibraryA
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
IsBadStringPtrA
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
Sleep
GetTickCount
InterlockedDecrement
CloseHandle
CreateThread
CreateFileA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
PeekMessageA
SendMessageA
FindWindowA
CallNextHookEx
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
??1type_info@@UAE@XZ
_CxxThrowException
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fgets
fseek
__CxxFrameHandler
wcslen
??2@YAPAXI@Z
sprintf
??3@YAXPAX@Z
atoi
calloc
free
_strdup
realloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ