DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
21b91a8531952a04b3abe801471023e9_JaffaCakes118.dll
Resource
win7-20240611-en
Target
21b91a8531952a04b3abe801471023e9_JaffaCakes118
Size
52KB
MD5
21b91a8531952a04b3abe801471023e9
SHA1
933b95cc975ed3cb9c8f06a0142fd7d3fc73246c
SHA256
19c0115aa8677dc0baecf06bf26d840b575252a5e9c54fb23c33039336187e6f
SHA512
87b469b21987e7ccf8cd40eaa4f59f5fa5951799a4d4291cc55f3409967691c04e33f2f8cbefd00374a71d1e9d08698fea121fdc433d6b723d92412a9a785b53
SSDEEP
1536:n2vTvqB14afQkNx5XQJvy0hDSSdYjO56Z:KTvIQkN8Jq0hefjO56
Checks for missing Authenticode signature.
resource |
---|
21b91a8531952a04b3abe801471023e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
GetProcAddress
lstrlenA
WideCharToMultiByte
lstrlenW
GetCommandLineW
WritePrivateProfileStringA
WaitForSingleObject
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
CreateDirectoryA
GetExitCodeProcess
LocalFree
GetCurrentProcessId
Sleep
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
ExitProcess
CreateThread
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
Process32First
Process32Next
GetModuleFileNameA
CloseHandle
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
atoi
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_access
_purecall
strncmp
strncpy
fopen
fseek
ftell
fread
fclose
??3@YAXPAX@Z
memset
strlen
sprintf
strcpy
strstr
strrchr
strcat
strcmp
_strlwr
strchr
??2@YAPAXI@Z
wcsstr
_wcslwr
memcmp
memcpy
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ