DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2464272603f8c476203455e09dbcb749_JaffaCakes118.dll
Resource
win7-20240611-en
Target
2464272603f8c476203455e09dbcb749_JaffaCakes118
Size
60KB
MD5
2464272603f8c476203455e09dbcb749
SHA1
d0f33b64b1a98ef5abd227ac1d34957831b8baee
SHA256
17be2f7a443152f7e0a4a1f138cba0090a73f4b3cee3fbf74e787b922a1ea2f1
SHA512
df2b9c2d40de9693f96ccb108ffde13e44a63845b53eef4ebf277017cc31ccb4ced552ea182d7ecefdb13f7d4915864beca166a3c9097ef5a821dfdf374e4e91
SSDEEP
768:Pdk/ZbiiBb16V/1wX9C/ft4ZZMg43XqHogzj+0TKhSNDS0fFsu6N:EwUIV9wX9CaACogZKhgDvFslN
Checks for missing Authenticode signature.
resource |
---|
2464272603f8c476203455e09dbcb749_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateProcessA
GetSystemDirectoryA
FreeLibrary
GetExitCodeProcess
WaitForSingleObject
RemoveDirectoryA
DeleteFileA
MoveFileA
SetFileAttributesA
Process32Next
Process32First
GetModuleFileNameA
WideCharToMultiByte
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
Sleep
GetCommandLineW
CreateThread
GetCurrentProcessId
WritePrivateProfileStringA
CreateDirectoryA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
ExitProcess
LoadLibraryA
LocalFree
GetProcAddress
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
strlen
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
atoi
_wcslwr
wcsstr
strcmp
strncmp
strchr
strncpy
strrchr
fopen
sprintf
memset
??3@YAXPAX@Z
memcpy
_purecall
??2@YAPAXI@Z
memcmp
strcat
strcpy
_access
_strlwr
strstr
fclose
fread
ftell
fseek
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ