DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fcde79a0f9fe6d3d7eeaee216ef20d54_JaffaCakes118.dll
Resource
win7-20240221-en
Target
fcde79a0f9fe6d3d7eeaee216ef20d54_JaffaCakes118
Size
80KB
MD5
fcde79a0f9fe6d3d7eeaee216ef20d54
SHA1
01f8d41a3b00f093c328ff13d62ab087e2d6ecdb
SHA256
7172b7465ea3874c6bde687ba487b92d1afc87b8eb929669b6266f97d048deb1
SHA512
cdfd72b19fe03554aff147ed13a8647edf7af973fce34f2167b02194e34c70a1bf8434ab5102556b0a18d15818530b505945db097e9669e641ffa625e64313a2
SSDEEP
1536:sg/UBHMHgCkY5R6JKVpwzi9Jrd4eup1USBRsK:oHMxxaqKiJ4eupBR
Checks for missing Authenticode signature.
resource |
---|
fcde79a0f9fe6d3d7eeaee216ef20d54_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
LocalFree
CloseHandle
Process32Next
Process32First
WideCharToMultiByte
lstrlenW
WritePrivateProfileStringA
CreateDirectoryA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
GetCurrentProcessId
RemoveDirectoryA
Sleep
ExitProcess
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetCommandLineW
GetProcAddress
SetFileAttributesA
DeleteFileA
MoveFileA
LoadLibraryA
FreeLibrary
MultiByteToWideChar
lstrlenA
CreateThread
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoUninitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoInitialize
CoMarshalInterThreadInterfaceInStream
VariantClear
SysAllocString
SysFreeString
LoadRegTypeLi
SysStringLen
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
fread
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
strcmp
_wcslwr
wcsstr
strncmp
strncpy
_access
strchr
atoi
strcpy
memcmp
_purecall
memcpy
strrchr
sprintf
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
strlen
fclose
_strlwr
memset
ftell
fseek
fopen
strcat
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ