GetDLlVersion
Run
Sunbelt
Static task
static1
Behavioral task
behavioral1
Sample
29a9138275309358317a0740a0f0a9ae_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
29a9138275309358317a0740a0f0a9ae_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
29a9138275309358317a0740a0f0a9ae_JaffaCakes118
Size
20KB
MD5
29a9138275309358317a0740a0f0a9ae
SHA1
9af9eea02402f0a7faad49b86b4900af290e8df4
SHA256
6dad16af039789751da6b6c74d2558721e5f800705904b64ccaf6f6f3ef4016c
SHA512
c517c88c005de372ef6477762644cc137589b009f2bb9928b346073926498e61698a88e3e4b1ecc46af42e95f253cd2dd56444b18cc17cfbe09f20c902d8e565
SSDEEP
192:YH8D9658RtIT0f4kXqVWkzlzNmFLsstzsae7htwT+Hr0y:B9qeSq4kXcNmp1Te7htRL0
Checks for missing Authenticode signature.
resource |
---|
29a9138275309358317a0740a0f0a9ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
TerminateProcess
FindClose
FindNextFileA
FindFirstFileA
Sleep
DisableThreadLibraryCalls
CreateProcessA
GetLastError
EnumChildWindows
GetWindowThreadProcessId
GetClassNameA
GetParent
CloseDesktop
SetForegroundWindow
EnumDesktopWindows
PostMessageA
CreateDesktopA
SendMessageA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
SHGetSpecialFolderPathA
WSACleanup
WSAStartup
connect
setsockopt
socket
htons
recv
closesocket
shutdown
inet_addr
gethostbyname
send
_adjust_fdiv
_initterm
time
srand
strchr
rand
atoi
strcmp
strcat
strcpy
_strcmpi
sprintf
malloc
strstr
free
strlen
memset
memcpy
GetDLlVersion
Run
Sunbelt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ