DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f6a2a59a84cd7d3bb109ad6acdd7ba39_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f6a2a59a84cd7d3bb109ad6acdd7ba39_JaffaCakes118
Size
52KB
MD5
f6a2a59a84cd7d3bb109ad6acdd7ba39
SHA1
c0dc3e9ee183fbe659830d8b65791f6dd993e668
SHA256
a221c8b0bdbce003df66f7bed5236b304980f70a297ee85c56f94ed1dac67c9d
SHA512
f1d2239da5562e1f8a9fb089077288d1c0bed0908bd669a5638e97a6c874bcdd0bfc48b1be2a77837f984465f4a50bb17ca34291f1e0f97ac49f14451ebf3d7b
SSDEEP
768:hvvLXmJuBGNgj5mMjI1t0cT4qf7hOZR6f6:hnLXcu8h7hOZRh
Checks for missing Authenticode signature.
resource |
---|
f6a2a59a84cd7d3bb109ad6acdd7ba39_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
GetModuleFileNameA
DisableThreadLibraryCalls
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
lstrlenW
HeapDestroy
lstrlenA
GetShortPathNameA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
lstrcpyA
MultiByteToWideChar
InterlockedDecrement
CloseHandle
CharNextA
MessageBoxA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ShellExecuteA
CoCreateInstance
LoadRegTypeLi
RegisterTypeLi
SysAllocString
LoadTypeLi
SysStringLen
SysAllocStringLen
SysFreeString
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayDestroy
_adjust_fdiv
_initterm
_stricmp
free
memcmp
_purecall
memcpy
malloc
strcat
rand
strstr
??2@YAPAXI@Z
??3@YAXPAX@Z
strcpy
strlen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ