DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1655e7a9d808dd76a97ecf7e68a4fcac_JaffaCakes118.dll
Resource
win7-20240611-en
Target
1655e7a9d808dd76a97ecf7e68a4fcac_JaffaCakes118
Size
60KB
MD5
1655e7a9d808dd76a97ecf7e68a4fcac
SHA1
f3ab8c7e017eb6c1a01ab74e5259b630b31943c0
SHA256
984f4dda835a6fc7491d8bffcbbb2b9e9ccb8d285787bc03e7101c72d86acec8
SHA512
93db2296e84c66e255be5bb329c33819d0a8dea994f0154a47b2f3e25b8ec23f227ce57489bbf2730d8b21ad642f46be978cf23e5e4db32ee9cb551b4a89c1bc
SSDEEP
768:DSp1q+jcouLZmIGSJ6LhSNX26qEcVBkyLPnUpii4EHqOwzkpQczjBFk3QJY82Laz:DSvI4PByAtH/Si2HScnBF+1LaL++
Checks for missing Authenticode signature.
resource |
---|
1655e7a9d808dd76a97ecf7e68a4fcac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RemoveDirectoryA
DeleteFileA
GetSystemDirectoryA
GetCommandLineW
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
LocalFree
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
WritePrivateProfileStringA
MoveFileA
SetFileAttributesA
GetCurrentProcessId
Sleep
CreateDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
ExitProcess
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
CreateThread
Process32First
CloseHandle
Process32Next
GetModuleHandleA
SetEntriesInAclA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
GetNamedSecurityInfoA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoMarshalInterThreadInterfaceInStream
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strncmp
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
atoi
strcmp
strrchr
fopen
fseek
ftell
fread
strcpy
??3@YAXPAX@Z
sprintf
memcmp
memcpy
_access
strcat
strncpy
strchr
memset
_strupr
strlen
strstr
_purecall
??2@YAPAXI@Z
fclose
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ