DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fd79a1c3652d890e36253f8e07ce36b7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fd79a1c3652d890e36253f8e07ce36b7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fd79a1c3652d890e36253f8e07ce36b7_JaffaCakes118
Size
48KB
MD5
fd79a1c3652d890e36253f8e07ce36b7
SHA1
1a18b827e4f55a2c736621a26cfbe399ce6562b1
SHA256
95f7acb6788bc9140f2d20fb1b2a9ef601820bba6a4816cb5b1a038b7f67d64a
SHA512
e80ec92853ccfdca9aa992e4005fa1d2c9c9bc0f5a82aee5dfecd210fd03e50f1f42880af0928d8c93e34f49de9affc2f3087666b88f8b8555e2e28da66eff34
SSDEEP
768:ZuM65sIx0/FBRPq00F/eeGAz/i4BldvikfbOKtLOcXwj0:ZhKs60/Jy0yeeGAm4BlQkpscXwj0
Checks for missing Authenticode signature.
resource |
---|
fd79a1c3652d890e36253f8e07ce36b7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
htons
connect
closesocket
send
ioctlsocket
gethostbyname
recv
socket
WSAStartup
LocalFree
GetModuleHandleA
IsBadStringPtrA
Sleep
GetProcAddress
LoadLibraryA
GetLastError
IsBadReadPtr
VirtualQuery
GetSystemInfo
WideCharToMultiByte
GetTickCount
InterlockedDecrement
CreateThread
CloseHandle
GetCommandLineA
GetModuleFileNameA
GetCurrentProcess
lstrcpynA
MapViewOfFile
CreateFileMappingA
CreateFileA
OpenFileMappingA
DisableThreadLibraryCalls
FlushInstructionCache
wsprintfA
PeekMessageA
GetForegroundWindow
GetClassNameA
CallNextHookEx
CoCreateInstance
OleRun
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
_initterm
_adjust_fdiv
_strupr
_strdup
_CxxThrowException
??1type_info@@UAE@XZ
_onexit
__dllonexit
strchr
free
isalpha
isdigit
realloc
malloc
atoi
wcslen
??2@YAPAXI@Z
sprintf
__CxxFrameHandler
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ