DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2be5ac7878a9f0c3c5c75db48e07468f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
2be5ac7878a9f0c3c5c75db48e07468f_JaffaCakes118
Size
60KB
MD5
2be5ac7878a9f0c3c5c75db48e07468f
SHA1
a4bec21d071eb2ec04131c50b339e566a7e8ad68
SHA256
ca0b578a1261aa8397ac1db3ce3ad196814e019e465e04848628f4f5f2a8d17a
SHA512
e1dd245bc8a06b4e651bd0b38c8e59040ce0afa734226eaf272ebe30f334dc787321f4cd77809c8d133538fe47b6517bd83ee0178dbc52af6e9b8ed5072600b4
SSDEEP
768:iIZlBlhes+Z3ZF/qR2F+PuqJZU+6ZNHgVoYahgvklqmOBiH0S9/0nNTKvuAC:iOnheHTpopCY3vklqN8PhQNks
Checks for missing Authenticode signature.
resource |
---|
2be5ac7878a9f0c3c5c75db48e07468f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
Sleep
CloseHandle
DeleteCriticalSection
Process32First
WideCharToMultiByte
GetCurrentProcessId
WritePrivateProfileStringA
ExitProcess
MoveFileA
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
CreateThread
InitializeCriticalSection
DisableThreadLibraryCalls
CreateDirectoryA
GetCommandLineW
LocalFree
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
FreeLibrary
DeleteFileA
RemoveDirectoryA
CreateProcessA
GetProcAddress
LoadLibraryA
Process32Next
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
??2@YAPAXI@Z
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
strlen
strncmp
strncpy
fopen
fseek
ftell
fread
??3@YAXPAX@Z
strcat
strcpy
memset
sprintf
_access
strstr
strrchr
atoi
strchr
_stricmp
memcpy
_purecall
memcmp
strcmp
fclose
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ