DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
efdd7f0e54f8303dd9b1f44d537b7d59_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efdd7f0e54f8303dd9b1f44d537b7d59_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
efdd7f0e54f8303dd9b1f44d537b7d59_JaffaCakes118
Size
36KB
MD5
efdd7f0e54f8303dd9b1f44d537b7d59
SHA1
4c810ffb2433cd7d04209184deb550a36fc1c7ca
SHA256
66bfded9b4caafd69bde96dafb0067919a263728b7d154bb2b3709e7a064592e
SHA512
bdef57fdb2ddeed8e50fc9e80cfa47052d4d6603f362c353870b233cc0c01c883e5750bf95fd2d703795f911a345e235fed738904af14cde6dde4a7ad5e26aee
SSDEEP
384:FTuM+7J7iZ702oCvRNljS4z/PNDP0wPox6mOMBgFmu+/wi6G:FLg0PXPl1P2VgFmlo
Checks for missing Authenticode signature.
resource |
---|
efdd7f0e54f8303dd9b1f44d537b7d59_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
htons
ioctlsocket
gethostbyname
closesocket
recv
socket
LocalFree
GetProcAddress
LoadLibraryA
GetLastError
GetSystemInfo
IsBadReadPtr
VirtualQuery
IsBadStringPtrA
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
Sleep
GetTickCount
InterlockedDecrement
CloseHandle
CreateThread
CreateFileA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
CallNextHookEx
CoInitializeEx
OleRun
CoCreateInstance
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
??1type_info@@UAE@XZ
_CxxThrowException
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fgets
fseek
__CxxFrameHandler
wcslen
??2@YAPAXI@Z
sprintf
??3@YAXPAX@Z
atoi
free
_strdup
realloc
calloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ