DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
270aa291f3bd46eb3b0a6c7426154541_JaffaCakes118.dll
Resource
win7-20240705-en
Target
270aa291f3bd46eb3b0a6c7426154541_JaffaCakes118
Size
60KB
MD5
270aa291f3bd46eb3b0a6c7426154541
SHA1
096850858bc48d0a8a8e8d286ed1ee2d4e6169ac
SHA256
cbfaa356cf6d876071cdcfe27d85e835b1d7a6671bea7f23f490b3cb4f29bdcb
SHA512
3f34851744906c31af3510baf6b2ac58162521609166bf79974e4e4b123b4f6d2c7c6285777525b4ae53375f4901dd76ed7981720436dee884ca6399992782bf
SSDEEP
1536:IZpxl4LBpIL08ttIUF4/37jldqwnK+xFeGqD:4WY08mFdq/+xcGG
Checks for missing Authenticode signature.
resource |
---|
270aa291f3bd46eb3b0a6c7426154541_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetCommandLineW
RemoveDirectoryA
lstrlenW
lstrlenA
WideCharToMultiByte
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
Sleep
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
LocalFree
ExitProcess
Process32Next
Process32First
GetSystemDirectoryA
CreateProcessA
CreateDirectoryA
MultiByteToWideChar
MoveFileA
LoadLibraryA
FreeLibrary
WritePrivateProfileStringA
GetModuleFileNameA
GetCurrentProcessId
CreateThread
SetFileAttributesA
CloseHandle
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
DeleteFileA
EnterCriticalSection
SetNamedSecurityInfoA
GetNamedSecurityInfoA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
_access
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
atoi
strcmp
fopen
fseek
ftell
fread
fclose
??2@YAPAXI@Z
_purecall
strstr
strrchr
sprintf
strlen
memset
strcat
strcpy
??3@YAXPAX@Z
wcsstr
_wcslwr
_strupr
strncpy
strchr
strncmp
memcmp
memcpy
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ