DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
30460a1d096888968a523e1cfa4381e9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
30460a1d096888968a523e1cfa4381e9_JaffaCakes118
Size
68KB
MD5
30460a1d096888968a523e1cfa4381e9
SHA1
291e89a6e8c6117f9399b903fee214262c8d9c00
SHA256
7c2f706019f190ebaef62e2dd3f67a730190712b330deebdf9b18f8fd89d42e8
SHA512
07aaff01effb4f2b5db90f76c5852507652c710d93d9a69cfb061e7d0fc3eafdf8ad64e770bc50c70b06ed190a0adb3ab760aeff0d99cd721460496750e755e6
SSDEEP
1536:y4bZbWHoERv2fKBJ6rihoep/EZa6DHszxqCDxyuK5e:tbZImyq436DHsVqCDx5Ke
Checks for missing Authenticode signature.
resource |
---|
30460a1d096888968a523e1cfa4381e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WritePrivateProfileStringA
FindNextFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
FreeLibrary
LoadLibraryA
CloseHandle
CreateProcessA
GetSystemDirectoryA
GetProcAddress
RemoveDirectoryA
GetCurrentProcessId
WideCharToMultiByte
Sleep
ExitProcess
Process32Next
Process32First
GetExitCodeProcess
WaitForSingleObject
CreateDirectoryA
GetCommandLineW
LocalFree
CreateThread
DeleteFileA
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
MoveFileA
SetNamedSecurityInfoA
SetEntriesInAclA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
fopen
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strcmp
atoi
strncmp
strchr
strncpy
_wcslwr
wcsstr
_access
strcpy
??3@YAXPAX@Z
memcpy
_purecall
??2@YAPAXI@Z
memcmp
fclose
fread
memset
ftell
fseek
_strlwr
strcat
strrchr
sprintf
strstr
strlen
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ