DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
17adf75dfcae7f9be41d1da4f082981f_JaffaCakes118.dll
Resource
win7-20240220-en
Target
17adf75dfcae7f9be41d1da4f082981f_JaffaCakes118
Size
52KB
MD5
17adf75dfcae7f9be41d1da4f082981f
SHA1
1fc8b55abc85dc23cda8d49084a85924e6a86e88
SHA256
2975a67575e237193d756ac33c8f4dcc048771d45048d448fab98cf4072c3ac0
SHA512
eb1be0ee75f2c18f28e3ddae41dc374d3bfca36bbb2900f5a5f9417941a5f910f04988bd0fc8e3aabc4b860d7fe518d3e1dc865ac04f09aa51f5d73356c7aa43
SSDEEP
768:ehQ9+SqZQcAsmlsitHVKcQ2Rod9HZaU4xj+k3o2aSBEa3MpfHdAbTw6KexL:aSqZPc9VPQ5dJh7MfMZubzKexL
Checks for missing Authenticode signature.
resource |
---|
17adf75dfcae7f9be41d1da4f082981f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindNextFileA
DeleteFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
CreateDirectoryA
ExitProcess
DisableThreadLibraryCalls
InitializeCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
MoveFileA
Process32Next
Process32First
GetExitCodeProcess
WaitForSingleObject
GetCurrentProcessId
CreateThread
Sleep
LocalFree
FreeLibrary
GetSystemDirectoryA
CreateProcessA
CloseHandle
GetModuleFileNameA
WritePrivateProfileStringA
LoadLibraryA
GetCommandLineW
GetProcAddress
DeleteCriticalSection
GetNamedSecurityInfoA
RegSetValueExA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
strrchr
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
atoi
_purecall
_access
memcpy
memcmp
strcat
strcpy
strncmp
strchr
??3@YAXPAX@Z
sprintf
strstr
??2@YAPAXI@Z
memset
strlen
strcmp
_strlwr
wcsstr
_wcslwr
strncpy
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ