DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2d4d145817bef280a41419ce4236d7bc_JaffaCakes118.dll
Resource
win7-20240708-en
Target
2d4d145817bef280a41419ce4236d7bc_JaffaCakes118
Size
36KB
MD5
2d4d145817bef280a41419ce4236d7bc
SHA1
320aff7dd36afbd8dba6be61dfafa4eda8b829b7
SHA256
bb4ba64301af619c1748ab5fd0183b508fc7a5ab9388982687488eca323c14da
SHA512
4f350d0f9845b120c8dfd012416917301138ad6c03f28737a06b79e4df80e38b7bd89994ffe2342ce3006cafa7c4359c9d6bcb1ddd85810e4a762553b702278d
SSDEEP
768:Y3xvtY8mJQ8HZTWQlEBxfSRXjhOzORsAb6Z8:YBvtNmiq4dBxfS1hOyRshZ8
Checks for missing Authenticode signature.
resource |
---|
2d4d145817bef280a41419ce4236d7bc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
CreateThread
ExitProcess
MoveFileA
DeleteFileA
SetFileAttributesA
GetCommandLineW
FindNextFileA
FindFirstFileA
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
lstrlenW
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetCurrentProcessId
GetExitCodeProcess
CloseHandle
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
Sleep
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
LoadLibraryA
DeleteCriticalSection
FreeLibrary
FindWindowExA
SetWindowTextA
SendMessageA
IsWindow
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoCreateInstance
CoInitialize
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
_strlwr
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
strcpy
??2@YAPAXI@Z
_purecall
strstr
strcat
strrchr
memcpy
sprintf
strlen
memset
??3@YAXPAX@Z
wcsstr
_wcslwr
memcmp
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ