DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ebd15d1bbb6bb7f2cc39177930956d94_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebd15d1bbb6bb7f2cc39177930956d94_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ebd15d1bbb6bb7f2cc39177930956d94_JaffaCakes118
Size
44KB
MD5
ebd15d1bbb6bb7f2cc39177930956d94
SHA1
ecfc297d0b1341c6a3e6fd7843a7405074c963cf
SHA256
5e96aae843a0f3c91dbfa6130a6d5d4fe0d41ff5428c7e08280629ba8aa91297
SHA512
01ec37923c5efa232ef3e9ca9bdae1eea6cfc4354ad5e96d15fc09a6375fa024d0800d95a833be24cd5d622fccdea0b9ffa7de390b29c0c002278975b0487e54
SSDEEP
384:36317I7DJw1J+P0Cjj7DI2S7noiW7INzR+gEkx9lNNCSLOgsT:a17I7Dc+3f7MtoGDNCSLOgs
Checks for missing Authenticode signature.
resource |
---|
ebd15d1bbb6bb7f2cc39177930956d94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSAStartup
connect
htons
closesocket
gethostbyname
ioctlsocket
recv
socket
LocalFree
VirtualAlloc
CreateThread
IsBadStringPtrA
LoadLibraryA
Sleep
GetProcAddress
GetSystemInfo
IsBadReadPtr
VirtualQuery
VirtualProtect
WideCharToMultiByte
GetModuleHandleA
GetTickCount
InterlockedDecrement
CloseHandle
CreateFileA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
DeleteFileA
GetClassNameA
SetWindowsHookExA
CallNextHookEx
FindWindowA
GetWindowTextA
GetParent
ScreenToClient
CoInitializeEx
OleRun
CoCreateInstance
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_CxxThrowException
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
atoi
calloc
realloc
_strdup
free
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ