DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2451e7f150cb0416081e2386718d0e1e_JaffaCakes118.dll
Resource
win7-20240419-en
Target
2451e7f150cb0416081e2386718d0e1e_JaffaCakes118
Size
60KB
MD5
2451e7f150cb0416081e2386718d0e1e
SHA1
9b921de16b6ad7bd5b7a65d010f01251014fa85c
SHA256
ecee40639de85fe2a016cf0fac4609f0e010809d67c8b4462ba11b20bb40e9f6
SHA512
b6fe85cde305cadfad548a4cb35b0f35566b3eba7df11a2e2394cb9b82a9174fde686b5215018b843c0f784176d7fe082fe247335fa776e54966f82a7eb3b3ee
SSDEEP
768:rCk5pGOq89iT5Gn4rZY+Dhx8JEoHlcmikiCjT4iwVyUNpLn4HxDYU48Uf72Xb2g:rCk5O89msqBbmZUujT04UvMBYUafBg
Checks for missing Authenticode signature.
resource |
---|
2451e7f150cb0416081e2386718d0e1e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
WritePrivateProfileStringA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
FreeLibrary
InitializeCriticalSection
GetExitCodeProcess
CloseHandle
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
Sleep
GetCommandLineW
ExitProcess
Process32Next
Process32First
DisableThreadLibraryCalls
lstrlenW
WideCharToMultiByte
GetModuleFileNameA
LocalFree
CreateThread
SetFileAttributesA
DeleteFileA
MoveFileA
lstrlenA
MultiByteToWideChar
GetCurrentProcessId
LoadLibraryA
GetProcAddress
CreateDirectoryA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
??2@YAPAXI@Z
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
atoi
_wcslwr
wcsstr
strcpy
strncmp
strchr
strncpy
fopen
fseek
strstr
??3@YAXPAX@Z
_access
strcat
sprintf
strlen
strcmp
strrchr
memcpy
_purecall
_strlwr
memcmp
fclose
fread
memset
ftell
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ