DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4075d080c3fbf255b6084d4089534c13_JaffaCakes118.dll
Resource
win7-20240705-en
Target
4075d080c3fbf255b6084d4089534c13_JaffaCakes118
Size
60KB
MD5
4075d080c3fbf255b6084d4089534c13
SHA1
3b571ff90adf768e343b83254bd8139fbfb903c8
SHA256
06fae0000b36a60f9c07c51c05de9351e2941de914a14098bf58d8a8c662b645
SHA512
27238cae167e78f139ce11cdf7a84946432ac28ff33301e23710ec74ce30d3da922eb329724c34fb474cbaf7d43a048c8b0ea12b6f75633f960143b4ee1632ce
SSDEEP
768:/s5b/T4mHZcxiF+X3ziAm2aIQDJVtK22ZCCXkirP/vNP4qpUUoJ9myqYAauRSzrM:8PSqAm2apJPYxzvfUBS3xa/zLV1TgXe
Checks for missing Authenticode signature.
resource |
---|
4075d080c3fbf255b6084d4089534c13_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
MoveFileA
WritePrivateProfileStringA
LocalFree
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
FreeLibrary
HeapDestroy
Sleep
GetCurrentProcessId
Process32Next
Process32First
GetCommandLineW
WideCharToMultiByte
RemoveDirectoryA
CreateDirectoryA
ExitProcess
CreateThread
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
CloseHandle
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
DeleteFileA
RegCreateKeyExA
RegSetValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
??2@YAPAXI@Z
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
atoi
fopen
fseek
ftell
fread
fclose
strcmp
_wcslwr
wcsstr
strstr
memset
strrchr
sprintf
strcat
strlen
strcpy
??3@YAXPAX@Z
memcpy
_purecall
_stricmp
memcmp
strncpy
strchr
strncmp
_access
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ