DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2f29b415c04edbbba96a1f6a8edcce55_JaffaCakes118.dll
Resource
win7-20240705-en
Target
2f29b415c04edbbba96a1f6a8edcce55_JaffaCakes118
Size
48KB
MD5
2f29b415c04edbbba96a1f6a8edcce55
SHA1
bc093f0ff373a7e93f9e9204b0133352fe6ad089
SHA256
6151df0f24c488bf547dee9090ce70a3a209f842c4a5d64f2e6d928f6bee0626
SHA512
cf293092d35a2b71d0328d2d05e0ab2f7d27643a970fb063f25f8af771b0ddbf1ad67933850370f44b118f9ba118b6def70767511c20b019e40ca6b58579958f
SSDEEP
768:SZ+ryHVNemPLvYM7rNOITZjkhg0pgGXJatKLlvGi4lcd7gOPpNa+DjX:SWyHnXLhIgY7lOigcNgwNa+Dj
Checks for missing Authenticode signature.
resource |
---|
2f29b415c04edbbba96a1f6a8edcce55_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindNextFileA
DeleteFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
GetExitCodeProcess
WaitForSingleObject
CreateDirectoryA
GetCurrentProcessId
CreateThread
RemoveDirectoryA
Sleep
DisableThreadLibraryCalls
LoadLibraryA
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Process32Next
Process32First
WritePrivateProfileStringA
MoveFileA
GetCommandLineW
ExitProcess
GetProcAddress
FreeLibrary
LocalFree
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
GetSystemDirectoryA
GetModuleFileNameA
CloseHandle
CreateProcessA
InitializeCriticalSection
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strlen
_strupr
_strlwr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_purecall
_wcslwr
wcsstr
strncmp
memset
sprintf
??3@YAXPAX@Z
strstr
memcmp
memcpy
??2@YAPAXI@Z
strcmp
strrchr
strcat
_stricmp
atoi
strchr
_access
strcpy
strncpy
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ