DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
41b05bdf2fbbd270679fee3bc0fdf2a2_JaffaCakes118.dll
Resource
win7-20240705-en
Target
41b05bdf2fbbd270679fee3bc0fdf2a2_JaffaCakes118
Size
52KB
MD5
41b05bdf2fbbd270679fee3bc0fdf2a2
SHA1
a441ec79f05828a54b07ebed93ae9f6559ffd5c7
SHA256
447a78f0d28e062dea8d4678d9a185ff3ff95d91f142a69501a1eaa37691a240
SHA512
66cdcdab073ad222336c8babe3297b183f76a9adabd5be78b4b0acd3bfdb5854720c3f5fdc8a4511d854b66693e332b1309512e536f00da23d891fd0732d1f45
SSDEEP
1536:hUtWBkDJ3/p2J44g4NDwFxLHiJOcIPRkJ:SGkDRB2J44VpIxzcskJ
Checks for missing Authenticode signature.
resource |
---|
41b05bdf2fbbd270679fee3bc0fdf2a2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
lstrlenW
lstrlenA
GetShortPathNameA
GetModuleHandleA
Sleep
FreeLibrary
LoadLibraryA
WritePrivateProfileStringA
CreateDirectoryA
GetProcAddress
WideCharToMultiByte
Process32Next
Process32First
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
CreateThread
GetCommandLineW
LocalFree
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
GetExitCodeProcess
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
ExitProcess
CloseHandle
GetCurrentProcessId
SetNamedSecurityInfoA
SetEntriesInAclA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
ftell
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
_access
atoi
strcpy
strncmp
strchr
strncpy
memcmp
_purecall
memcpy
memset
sprintf
strcmp
strrchr
strlen
??3@YAXPAX@Z
fclose
fread
??2@YAPAXI@Z
_stricmp
fseek
fopen
strcat
strstr
wcsstr
_wcslwr
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ