DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
304645d7b51c6847ea9cd2cf422758e2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
304645d7b51c6847ea9cd2cf422758e2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
304645d7b51c6847ea9cd2cf422758e2_JaffaCakes118
Size
44KB
MD5
304645d7b51c6847ea9cd2cf422758e2
SHA1
4b334d72e53307133e95760e1a6b039b690ac4a1
SHA256
0a27083c3e5251cac28609f438b9ce58bd006534f6f6c0bff22c7dfb42429b93
SHA512
8b9d9d41a5c1a06ea981ed471328ab8e24bafb38c94b060970d7df8a4cd4f40882ba0c5a4c0f0f1dadab39cdffafa5591f15bb2066293dee97f0520268593316
SSDEEP
768:7OadJj/Rrr7KHriyEkTZuf4t0nUi1HUVi3msutXL:7OadJ/VsGYuKoeijutb
Checks for missing Authenticode signature.
resource |
---|
304645d7b51c6847ea9cd2cf422758e2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
GetCurrentProcessId
GetProcAddress
FindNextFileA
FindFirstFileA
CreateThread
MoveFileA
DeleteFileA
SetFileAttributesA
Sleep
GetExitCodeProcess
CloseHandle
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
EnterCriticalSection
Process32Next
Process32First
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetCommandLineW
lstrlenA
MultiByteToWideChar
lstrlenW
GetModuleFileNameA
ExitProcess
LoadLibraryA
LeaveCriticalSection
FreeLibrary
FindWindowExA
IsWindow
SendMessageA
SetWindowTextA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoCreateInstance
CoInitialize
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
memcpy
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strncmp
strchr
strncpy
_purecall
strcpy
_wcslwr
wcsstr
memset
strlen
??2@YAPAXI@Z
??3@YAXPAX@Z
strcmp
strrchr
memcmp
_strlwr
sprintf
strcat
strstr
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ