DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
15c3eeab435ab4a2ad3cee280e48b73b_JaffaCakes118.dll
Resource
win7-20240508-en
Target
15c3eeab435ab4a2ad3cee280e48b73b_JaffaCakes118
Size
52KB
MD5
15c3eeab435ab4a2ad3cee280e48b73b
SHA1
608fa3efa250de6c6bedba1cde991055394fcd18
SHA256
084ec6e475e97f6f6d2b8f6058f64498eb143451a38020fdedee4735ca154945
SHA512
14069d2254bf3b506cc01fec1fb08cffe7ee8e73f2f624384b78e58f49b78b5889d5bbc83b261cc1610043d4c6a4a1324c3fef4ebeca4203652379c39995f333
SSDEEP
768:0XZSRShXw/MVqWJ0MCapi7XfzWBS/d4hxbArelbIkpmUIdwRUjp+ml:ig98tJ0MyziS/dwbAIb9mUIdKko
Checks for missing Authenticode signature.
resource |
---|
15c3eeab435ab4a2ad3cee280e48b73b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCommandLineW
CloseHandle
CreateProcessA
GetSystemDirectoryA
LocalFree
CreateThread
FindNextFileA
DeleteFileA
GetPrivateProfileStringA
FindFirstFileA
WideCharToMultiByte
LoadLibraryA
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
SetFileAttributesA
Sleep
CreateDirectoryA
MoveFileA
RemoveDirectoryA
Process32Next
Process32First
GetProcAddress
WritePrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
DisableThreadLibraryCalls
GetCurrentProcessId
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
strrchr
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_wcslwr
wcsstr
_access
strcpy
memcpy
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
sprintf
memset
atoi
strchr
strstr
_strupr
strcat
strlen
strcmp
strncpy
strncmp
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ