DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
38542135c62ebcd38ba09f81131e6334_JaffaCakes118.dll
Resource
win7-20240705-en
Target
38542135c62ebcd38ba09f81131e6334_JaffaCakes118
Size
60KB
MD5
38542135c62ebcd38ba09f81131e6334
SHA1
9dbfdf4d324a517b9ee89e4c1acc85aa9986afc1
SHA256
d4299f4bf2796e0d014c659f73492d8c2349a75d48ec19b6b8971d996b87d84a
SHA512
f27f856f8be09bd6d0594c358e3314569d4ddd433f8a36955af38fc642d5bdc04efe8b9c891118c62afcdbc84a0c6d70c7357a702b0984fe67af6235c7c9d486
SSDEEP
768:m0IwrZhqNYFAh/LJytvJhiUP7eLzkRyfBJ3bK7fP0dzWelkcm3wrIY58p2:Dy5/LJExHP7e7DbuwzWeOTwrIAN
Checks for missing Authenticode signature.
resource |
---|
38542135c62ebcd38ba09f81131e6334_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
MoveFileA
SetFileAttributesA
CloseHandle
CreateProcessA
GetSystemDirectoryA
WritePrivateProfileStringA
Sleep
GetCommandLineW
LocalFree
MultiByteToWideChar
CreateThread
GetExitCodeProcess
WaitForSingleObject
ExitProcess
GetCurrentProcessId
Process32Next
Process32First
CreateDirectoryA
RemoveDirectoryA
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
lstrlenW
WideCharToMultiByte
FreeLibrary
LoadLibraryA
GetProcAddress
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
DeleteFileA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
_wcslwr
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
_access
fopen
fseek
ftell
fread
fclose
strcat
strcpy
strncmp
strstr
strrchr
sprintf
??3@YAXPAX@Z
strlen
memcpy
_purecall
??2@YAPAXI@Z
memcmp
wcsstr
_strupr
atoi
strchr
memset
strcmp
strncpy
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ