DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
386566ce64713c10d091a8b6cb8f26db_JaffaCakes118.dll
Resource
win7-20240704-en
Target
386566ce64713c10d091a8b6cb8f26db_JaffaCakes118
Size
60KB
MD5
386566ce64713c10d091a8b6cb8f26db
SHA1
3c374758d964035e96b924749d78898923e5df42
SHA256
0f28e34ec91cfd8c37b0fa8638eb5e48865448af50d7c51375e4c0b5b255ac2e
SHA512
199445b94f19ede288a267f790df61d59f644258af4d87f862b94cf1278212c8ed1a53ffe58f883e88eafd5e8e1cc469b1baebcc21c2a305010d9cd08ad914ea
SSDEEP
768:UbJXCkYaA6IXmNA6xabZct5h5XwjdwhjZj5bPK+h+PmAZL0A8t8os6Zr8AbZKOee:UcMlI36uerwskBPmAePDsYDbQkveVO
Checks for missing Authenticode signature.
resource |
---|
386566ce64713c10d091a8b6cb8f26db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
lstrlenW
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
ExitProcess
GetCurrentProcessId
FreeLibrary
LeaveCriticalSection
WideCharToMultiByte
CreateProcessA
GetSystemDirectoryA
GetExitCodeProcess
WaitForSingleObject
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
GetCommandLineW
Sleep
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
Process32First
Process32Next
lstrlenA
CreateThread
LocalFree
WritePrivateProfileStringA
CreateDirectoryA
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
CloseHandle
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoUninitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoInitialize
CoMarshalInterThreadInterfaceInStream
SysFreeString
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
??3@YAXPAX@Z
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
atoi
_wcslwr
wcsstr
fopen
fseek
ftell
fread
fclose
strncmp
strchr
strncpy
strcmp
strrchr
strlen
memset
strcat
strcpy
sprintf
_access
_strupr
memcpy
_purecall
??2@YAPAXI@Z
memcmp
strstr
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ