DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0f76f7c07d8d2ac307601cb02e0a1110_JaffaCakes118.dll
Resource
win7-20240611-en
Target
0f76f7c07d8d2ac307601cb02e0a1110_JaffaCakes118
Size
68KB
MD5
0f76f7c07d8d2ac307601cb02e0a1110
SHA1
1b3c7aa22c28d205f2cc2100ceefc4f45c3a2095
SHA256
3d763541e7229dc351d8715dc236970487935dbfeee411a6d34fbbaf8ef23c1d
SHA512
8dcdeedae1ce3d35505c9d1f4c6476459dad67b9ac5c0612741968ff5057eeebe284f94f6eaa2d83680bb0806c46ca6bef517396b4047954529aac09e5255ea3
SSDEEP
1536:mATy6D56mfzxce/YU0Eh0mjFvLfVJr92q5x6:mdO6EimjFj9j5x6
Checks for missing Authenticode signature.
resource |
---|
0f76f7c07d8d2ac307601cb02e0a1110_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RemoveDirectoryA
DeleteFileA
Process32Next
Process32First
GetExitCodeProcess
WaitForSingleObject
Sleep
FindNextFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
CreateThread
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
ExitProcess
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
WritePrivateProfileStringA
LocalFree
CreateDirectoryA
GetSystemDirectoryA
CreateProcessA
CloseHandle
GetCommandLineW
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
LoadLibraryA
FreeLibrary
GetProcAddress
MoveFileA
GetNamedSecurityInfoA
RegSetValueExA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
_access
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
_purecall
memcpy
fopen
fseek
ftell
fread
fclose
memcmp
??3@YAXPAX@Z
atoi
strchr
sprintf
strstr
??2@YAPAXI@Z
memset
wcsstr
_wcslwr
_strlwr
strcat
strcmp
strrchr
strcpy
strlen
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ