DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
21eaac53a1b4e2a4c5507cd5f14879ad_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
21eaac53a1b4e2a4c5507cd5f14879ad_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
21eaac53a1b4e2a4c5507cd5f14879ad_JaffaCakes118
Size
52KB
MD5
21eaac53a1b4e2a4c5507cd5f14879ad
SHA1
4a6aaa5049a66873fa06645edb2c0a4b46b59dd7
SHA256
77783d3576e137be068c129dfe0cf9e5a3d6671ab249711abe56f276b667efcc
SHA512
43e75eb524a6d2e2ad4c3c52af4af2d14b3600a76250db134b0972600572d29fd5ddb118e64f5c32f9df312aff2e3edf2b8675e96bd254c36915bbd9b29d20f4
SSDEEP
768:vmSUmDqpGHMSXgqClbtGkZ3EyDep21PxARlMq5VJBdCpuSj9FcMNIqbYR:vxmGsSXgqClx7OKxARjvzdVqcYFbY
Checks for missing Authenticode signature.
resource |
---|
21eaac53a1b4e2a4c5507cd5f14879ad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedDecrement
HeapDestroy
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
Sleep
GetCurrentProcessId
WritePrivateProfileStringA
CreateThread
FindNextFileA
InterlockedIncrement
FindFirstFileA
ExitProcess
LocalFree
SetFileAttributesA
Process32Next
Process32First
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
MoveFileA
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
GetCommandLineW
GetProcAddress
LoadLibraryA
FreeLibrary
CloseHandle
CreateDirectoryA
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
CreateProcessA
RemoveDirectoryA
GetPrivateProfileStringA
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
??2@YAPAXI@Z
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
fopen
fseek
ftell
fread
fclose
strcmp
_wcslwr
strcat
strcpy
memset
_access
sprintf
strstr
??3@YAXPAX@Z
strlen
memcpy
_purecall
_strupr
memcmp
strrchr
atoi
strchr
wcsstr
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ