DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
04c68bca9342055429241a5c911414e0_JaffaCakes118.dll
Resource
win7-20240419-en
Target
04c68bca9342055429241a5c911414e0_JaffaCakes118
Size
56KB
MD5
04c68bca9342055429241a5c911414e0
SHA1
116f110d254335c79985af7a3f188656c693207f
SHA256
96a2125703ab5c032ffbdad8b1506e09a18cb306054237e2b947ac6d868c44eb
SHA512
7061560a0a59afd801423b7f0a9140dde5edaaf0028ca898600d2c0e8f2f765e8d9b2ab1f813759ad52bb403869a2547482844f1859746d6e83f13ff8a15dbad
SSDEEP
768:BEtBsfYYGZn6mojHxO/f7y0eaaPZEXCpN9dwCf+spV7OXvnzLi4esKE:BE30GZnHojH9ZkqdFzOXrHesKE
Checks for missing Authenticode signature.
resource |
---|
04c68bca9342055429241a5c911414e0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateProcessA
GetSystemDirectoryA
Process32Next
Process32First
Sleep
GetExitCodeProcess
WaitForSingleObject
GetCurrentProcessId
WritePrivateProfileStringA
CreateThread
MoveFileA
DisableThreadLibraryCalls
WideCharToMultiByte
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
CreateDirectoryA
ExitProcess
GetCommandLineW
lstrlenA
MultiByteToWideChar
lstrlenW
LocalFree
FreeLibrary
LoadLibraryA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
FindNextFileA
GetModuleFileNameA
InitializeCriticalSection
RegCreateKeyExA
RegSetValueExA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
ftell
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
_access
_wcslwr
wcsstr
_purecall
strchr
atoi
strlen
strcmp
strrchr
strstr
memset
sprintf
strcat
??3@YAXPAX@Z
fclose
fread
??2@YAPAXI@Z
_stricmp
fseek
fopen
memcmp
memcpy
strcpy
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ