?AttachModule@@YGXPBUModuleInfo@@@Z
?CallCore@@YGXXZ
Check
Static task
static1
Behavioral task
behavioral1
Sample
fffbe4e276391b02260b2ab0faabc913_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fffbe4e276391b02260b2ab0faabc913_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fffbe4e276391b02260b2ab0faabc913_JaffaCakes118
Size
15KB
MD5
fffbe4e276391b02260b2ab0faabc913
SHA1
4974067444f808fabcbc02125f5185b3881595e1
SHA256
115a1f1fc11414c07de441e6270b9e2147923e22ac4f62b671784284c5b266c2
SHA512
6a8b8aa1f3972c83a486bd5f2ad3cbea7b30047c1409f64b266011809be21b47b59e01fc077974fa5986b2e00dc09742b11d76234e4d9ba6b541490b3f26134c
SSDEEP
384:9Kj/lGdhCai5+MeFBNNfU5vDEUajyyXW58oXIvKD:e/Ohti5+XFDNfUBNkyyXKdIvK
Checks for missing Authenticode signature.
resource |
---|
fffbe4e276391b02260b2ab0faabc913_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
connect
htons
recv
gethostbyname
send
socket
closesocket
WSAStartup
CryptStringToBinaryA
CryptBinaryToStringA
lstrcatA
lstrcmpiA
GetProcAddress
GetTempFileNameA
LoadLibraryA
GetVersionExA
GetLocaleInfoA
GetTempPathA
lstrcpyA
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
CreateProcessA
MoveFileExA
GetModuleFileNameA
CreateThread
CreateEventA
GetSystemTime
VirtualFree
ExitProcess
Sleep
GetTickCount
EnterCriticalSection
LeaveCriticalSection
lstrlenA
GetLastError
InitializeCriticalSection
FreeLibrary
CloseHandle
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegEnumKeyA
RegCreateKeyExA
RegQueryValueExA
CryptHashData
CryptDecrypt
CryptDestroyKey
CryptGenKey
CryptCreateHash
CryptEncrypt
CryptImportKey
CryptReleaseContext
CryptAcquireContextW
CryptExportKey
CryptGetHashParam
CryptDestroyHash
?AttachModule@@YGXPBUModuleInfo@@@Z
?CallCore@@YGXXZ
Check
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ