DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
442894702ac40c303501081ba9148202_JaffaCakes118.dll
Resource
win7-20240705-en
Target
442894702ac40c303501081ba9148202_JaffaCakes118
Size
72KB
MD5
442894702ac40c303501081ba9148202
SHA1
119d2c4ddab7b126ba06398202bc048b3bc6ce22
SHA256
9337c3ba867dcf4fa1825fcca1bf8684fea1cd02eaf6f0dc396c3f518fc0f594
SHA512
ad8404be0000e6bda6aa759bf1416246c14d380b9a058703585b92a5f4d6682886928a9cfe8571b3e457f6898937762b368d7139fcc8d6af6788b622e72a5778
SSDEEP
768:8ObRUe3ZDRiJTZKNA+lZejKJsr6s8WsDMgRLhAUFiIlDfLQhwvZ9Z9uzH:8m17QZK3l8Dr6s5sbRLhVi+DTQWZ9Ze
Checks for missing Authenticode signature.
resource |
---|
442894702ac40c303501081ba9148202_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
CreateDirectoryA
Sleep
CreateProcessA
GetSystemDirectoryA
GetCurrentProcessId
RemoveDirectoryA
LocalFree
FreeLibrary
lstrlenW
GetProcAddress
WideCharToMultiByte
MoveFileA
GetExitCodeProcess
WaitForSingleObject
WritePrivateProfileStringA
ExitProcess
CreateThread
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
FindNextFileA
Process32First
Process32Next
GetCommandLineW
CloseHandle
LoadLibraryA
BuildExplicitAccessWithNameA
RegSetValueExA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
memcmp
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
strncmp
strncpy
strlen
strchr
atoi
fopen
fseek
strcpy
strstr
memset
strrchr
sprintf
strcat
memcpy
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
_strlwr
strcmp
_access
fclose
fread
ftell
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ