DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2f265736d0f8ce4f382c6c68247737f2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2f265736d0f8ce4f382c6c68247737f2_JaffaCakes118
Size
68KB
MD5
2f265736d0f8ce4f382c6c68247737f2
SHA1
6402855fbcf18cc1936f9cdf587f57f9322f35cf
SHA256
5c33824e9c8dafedd660cb2e1299dddf0f51869b87879472752881b425334f84
SHA512
506fcd1347fde9b841664775eb4b699992d15105a5ba5f888c5d730d4153ff1a5d6ecb74254d1a9f7b71b7fe367df13f3a1cb15fb6ae4944991c0da262de98da
SSDEEP
768:PuvZC6mL6HQaFy9pL33jqMnzsdeRyXVpbp2wwKg9aewRSr7oRGwhoSiwjUuWCbP:oUuHQt7lYd++p6KgAv0JujUtm
Checks for missing Authenticode signature.
resource |
---|
2f265736d0f8ce4f382c6c68247737f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
FindNextFileA
DeleteFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
GetProcAddress
CloseHandle
LocalFree
Process32Next
Process32First
CreateProcessA
GetSystemDirectoryA
GetShortPathNameA
RemoveDirectoryA
Sleep
GetCommandLineW
WritePrivateProfileStringA
GetCurrentProcessId
ExitProcess
GetExitCodeProcess
WaitForSingleObject
MoveFileA
CreateThread
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
FreeLibrary
LoadLibraryA
CreateDirectoryA
RegDeleteKeyA
RegEnumKeyExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strcat
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
strncmp
strncpy
_access
_wcslwr
memcmp
memcpy
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
strcmp
strrchr
sprintf
strstr
memset
_strlwr
atoi
strchr
strlen
strcpy
wcsstr
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ