DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ea0a1dccf72e853db6105c9348c9a55b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ea0a1dccf72e853db6105c9348c9a55b_JaffaCakes118
Size
76KB
MD5
ea0a1dccf72e853db6105c9348c9a55b
SHA1
cca87a24cc600cec4f21bc27e8a10a85cc92edbd
SHA256
ed3b2865032c53a0090698ed9de37981c39ef0323fed9f5f0125020309c1aa00
SHA512
e1aee5751cfc95835ded990badd4c81125d2dca9a0fba713482dc0f88781ffb31b63694b9c6fc28c6f31b09ae758e7a49ab3cca34fccdb047cb894643f6e8a6e
SSDEEP
768:gzR/oxHc+Hv8Wq0Cz95JSnTbE/fxw9QfARX3ijxG7pkxOjSiAXpoJpBYYB:A9oVvP8Wo95JSnTbE/f7Y3nryoJbY
Checks for missing Authenticode signature.
resource |
---|
ea0a1dccf72e853db6105c9348c9a55b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
lstrcpynA
WideCharToMultiByte
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
HeapSize
Sleep
lstrlenW
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
lstrlenA
lstrcpyA
lstrcmpiA
DisableThreadLibraryCalls
SetFilePointer
FlushFileBuffers
SetStdHandle
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
LCMapStringA
LCMapStringW
ExitProcess
GetLastError
CloseHandle
WriteFile
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
SendMessageA
GetDlgItemTextA
SetWindowLongA
GetDlgItem
SysFreeString
LoadRegTypeLi
SysStringLen
VariantClear
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SysAllocStringLen
VariantCopy
VariantChangeType
ord31
ord30
ord58
ord32
ord22
ord18
ord15
ord16
ord21
ord23
inet_addr
getprotobyname
socket
connect
send
gethostbyname
htons
closesocket
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ