DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f347e33bea49298630854ade7d2ec3c3_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f347e33bea49298630854ade7d2ec3c3_JaffaCakes118
Size
116KB
MD5
f347e33bea49298630854ade7d2ec3c3
SHA1
670f4fcc432a786e218d71b14cce35f3497c09be
SHA256
6d4e3b8ce065a0f859b47102fd3ce8668c606f2cef93f3a288e33b64e3be6f77
SHA512
01f60e3c1d534d4aff76756da70e4d93cd25750d343fd26bd57ea77b8800967ded2b3d3e1f6d348e40b18b77851c06e8346d67af5e46e54a6076d3739cb570b8
SSDEEP
1536:mD8jfBp7KYhPOr9hnB9Ugt3zVAt7HYnEmAxfxaKQGs2J/3s1f44zSBCRMnXQ:mD8jfBtH1GdAuK9sM81f44zxMnX
Checks for missing Authenticode signature.
resource |
---|
f347e33bea49298630854ade7d2ec3c3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
CopyFileA
MultiByteToWideChar
GetModuleFileNameA
DisableThreadLibraryCalls
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
lstrlenA
GetShortPathNameA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetTempFileNameA
GetTempPathA
GetLocalTime
lstrlenW
LocalFree
GetLastError
lstrcpyA
HeapDestroy
ReadFile
CharNextA
MessageBoxA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
ShellExecuteA
CoCreateInstance
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroy
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
VariantClear
URLDownloadToFileA
_itoa
??1type_info@@UAE@XZ
_onexit
__dllonexit
_adjust_fdiv
_initterm
_CxxThrowException
wcslen
fseek
ftell
rewind
fread
realloc
_stricmp
memcmp
memcpy
_purecall
rand
strstr
strcmp
tolower
strcpy
strlen
??3@YAXPAX@Z
memset
??2@YAPAXI@Z
fclose
abs
strncpy
fgets
free
malloc
fopen
strcat
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ