DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
45b1fefe062990d4ee3b7af2b1d31a8b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
45b1fefe062990d4ee3b7af2b1d31a8b_JaffaCakes118
Size
52KB
MD5
45b1fefe062990d4ee3b7af2b1d31a8b
SHA1
e297a680c0a10e4151bae259dbb47bdb14d58bf9
SHA256
2d1a8b0265e42a0e9b8ebc0dfe40b16a307094781d1c950a43b7dc92b715b8ab
SHA512
845b2d54a36803b8fd5f6da2ade602d8de655fe1a7a608993da31ea9c4b0113ca6a572f22ca8860d496bbc26d6b390443ec0f838bc21fc3f73006eab8f2ccba8
SSDEEP
768:z9icSshGqkj0tGuTdBMh/mnO68mW+Yd8E97ZiE0ZRefrW0CFsoRSLxNyUwSnrHxu:zJhGqk4EV68mW+m5193USLXy7k+2D
Checks for missing Authenticode signature.
resource |
---|
45b1fefe062990d4ee3b7af2b1d31a8b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
FindNextFileA
DeleteFileA
GetPrivateProfileStringA
FindFirstFileA
WritePrivateProfileStringA
GetProcAddress
WideCharToMultiByte
lstrlenW
Process32Next
Process32First
lstrlenA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
ExitProcess
MoveFileA
MultiByteToWideChar
LoadLibraryA
FreeLibrary
CreateDirectoryA
CreateThread
SetFileAttributesA
LocalFree
GetCommandLineW
GetCurrentProcessId
GetSystemDirectoryA
CreateProcessA
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GetExitCodeProcess
DisableThreadLibraryCalls
BuildExplicitAccessWithNameA
RegQueryValueExA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
strcpy
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_purecall
memcpy
memcmp
atoi
strcmp
strrchr
memset
sprintf
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
strlen
strcat
_stricmp
_access
strncpy
strchr
strncmp
wcsstr
_wcslwr
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ