DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ec54c7ea4dda530ba56c7d70ff1b7f08_JaffaCakes118.dll
Resource
win7-20240221-en
Target
ec54c7ea4dda530ba56c7d70ff1b7f08_JaffaCakes118
Size
52KB
MD5
ec54c7ea4dda530ba56c7d70ff1b7f08
SHA1
72ddde6e3f65af6c1e6f421be31607d29992a27d
SHA256
695493d4e78bfd605bc47bdfc6388d7eb397b4c71afcdebf748909cdca65d749
SHA512
9fbeb335e27aef5a33368134a3e151e9fcc54df44c964b1aaf9aa7a896f7621f8c165a4fd2aa3bfe3d00f8e65145ef4a41cadcd51b20a9ef6dbf7073cffe7a6e
SSDEEP
768:1Wj/zKqdYLZ0rWz9WI/09XoIm3LDFL347DU6ld+FFvR/iZtKsMXk+zBBpOSFUa/g:1uXK+CuGIyDt347Q6lILv5l3pzBfUlV
Checks for missing Authenticode signature.
resource |
---|
ec54c7ea4dda530ba56c7d70ff1b7f08_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
CloseHandle
Sleep
ExitProcess
GetCommandLineW
CreateProcessA
EnterCriticalSection
LocalFree
CreateDirectoryA
CreateThread
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
WritePrivateProfileStringA
GetCurrentProcessId
Process32Next
Process32First
LeaveCriticalSection
MoveFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
DeleteFileA
RemoveDirectoryA
SetEntriesInAclA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
GetNamedSecurityInfoA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
fclose
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
strcmp
_access
strncmp
strncpy
_wcslwr
wcsstr
strcpy
_purecall
strlen
strstr
memset
strrchr
sprintf
strcat
??3@YAXPAX@Z
memcmp
memcpy
atoi
strchr
_stricmp
fread
??2@YAPAXI@Z
ftell
fseek
fopen
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ