DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2f765586f2751b7a4bfa8deea068a8bd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2f765586f2751b7a4bfa8deea068a8bd_JaffaCakes118
Size
76KB
MD5
2f765586f2751b7a4bfa8deea068a8bd
SHA1
ea5ec3efa73b6335345eefc9477bcbe8090d08ba
SHA256
2a86c8f0d5678c536ccfda0027d4ff25e1fef8bfc6ae07fe63b6dfa26c9eb663
SHA512
6b25d2a069834c9c498964ba703cac17cd6f0eca359ed660fc07ff80b3deff1d17207dd509b447897375bfbe3ce490ce8e360e5606f8ec60bea76feafb46dc03
SSDEEP
1536:qxQRsxeGVec1izsLHA+YjJLKMAgH7VztGoe1b:qreG51g+SvztGoe
Checks for missing Authenticode signature.
resource |
---|
2f765586f2751b7a4bfa8deea068a8bd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
ExitProcess
CreateDirectoryA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetExitCodeProcess
GetModuleHandleA
CreateThread
GetCurrentProcessId
LocalFree
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
GetCommandLineW
WritePrivateProfileStringA
RemoveDirectoryA
Process32First
Process32Next
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
lstrlenA
GetProcAddress
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
Sleep
CloseHandle
FreeLibrary
LoadLibraryA
GetShortPathNameA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
ftell
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
atoi
strncmp
strchr
strncpy
strcmp
_purecall
memcpy
strlen
memset
strcat
strcpy
sprintf
??3@YAXPAX@Z
memcmp
fclose
fread
??2@YAPAXI@Z
_strlwr
fseek
fopen
strrchr
strstr
_access
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ