DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ISTactivex.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ISTactivex.dll
Resource
win10v2004-20240226-en
Target
ec562ed1f222e495c8153cd5231d31b3_JaffaCakes118
Size
31KB
MD5
ec562ed1f222e495c8153cd5231d31b3
SHA1
05754c2d58c1210a0f06f7a78b8fdb3a31b3c059
SHA256
5acebe01af4f03ec6ba8e82b82fa9c057d29eb12cfa371ab2fe3dc127ed79525
SHA512
4e1a8501d7c0090db67a535202b3ec95bb96a3f30a0583d70336fb5e30957ac318e1c4f3865b3254ec4e305afa4b818ef0dc735b9a085d361a2878ac4718ac49
SSDEEP
768:ePRkTyaADRrQjcr3xhtPh76bqnoLptFvE:1wlr0crLVnou
Checks for missing Authenticode signature.
resource |
---|
unpack001/ISTactivex.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHRegCreateUSKeyA
SHRegWriteUSValueA
ord1187
ord825
ord535
ord939
ord2818
ord858
ord537
ord540
ord823
ord940
ord665
ord1979
ord6385
ord353
ord5207
ord268
ord389
ord1567
ord6059
ord800
memset
_adjust_fdiv
memcpy
free
realloc
malloc
strlen
sprintf
strncpy
strcat
_itoa
strcpy
wcscmp
_purecall
memcmp
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
_initterm
__CxxFrameHandler
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
GetShortPathNameA
HeapDestroy
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetComputerNameA
GetTempPathA
GetSystemTimeAsFileTime
SystemTimeToFileTime
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
SizeofResource
FreeLibrary
lstrlenW
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
DisableThreadLibraryCalls
LoadResource
CharNextA
RegCloseKey
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
ShellExecuteA
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
LoadRegTypeLi
SysAllocString
LoadTypeLi
RegisterTypeLi
VarUI4FromStr
VariantClear
SysStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ