DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
02e30a6989788c9e44f38327a4e1fda4_JaffaCakes118.dll
Resource
win7-20240220-en
Target
02e30a6989788c9e44f38327a4e1fda4_JaffaCakes118
Size
68KB
MD5
02e30a6989788c9e44f38327a4e1fda4
SHA1
c6f9875721a98a00075f8efb2bb5d24fcc8fe408
SHA256
47d18e85d29bcd8f87e8ce3560cae1652f13f308758cac44c9673a81b1b86d4c
SHA512
56ad8aca594e934542f9c2225e440598fa604aa2c774f512519fc610d85e85c2981795969bfa3daa85f449f40a7cc092540ca04a2594c4fcc6c47310fe5d07a3
SSDEEP
1536:02MMUsGovYLcB6RRriFvy6ev35EHSJHHn2JYZy:fMOYi6R+yImn2JYZy
Checks for missing Authenticode signature.
resource |
---|
02e30a6989788c9e44f38327a4e1fda4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
CreateDirectoryA
FindNextFileA
CloseHandle
GetCurrentProcessId
CreateProcessA
GetSystemDirectoryA
RemoveDirectoryA
CreateThread
Process32Next
Process32First
FreeLibrary
GetExitCodeProcess
WaitForSingleObject
MoveFileA
LocalFree
LoadLibraryA
GetProcAddress
WritePrivateProfileStringA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
Sleep
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
ExitProcess
GetCommandLineW
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
_purecall
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
atoi
strncmp
strchr
strncpy
_wcslwr
wcsstr
fopen
fseek
ftell
strcmp
strrchr
??3@YAXPAX@Z
sprintf
memcmp
memcpy
strstr
strlen
memset
strcat
_stricmp
??2@YAPAXI@Z
_access
strcpy
fclose
fread
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ