DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
47d581532b2460cc63c75ea6401a82a4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
47d581532b2460cc63c75ea6401a82a4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
47d581532b2460cc63c75ea6401a82a4_JaffaCakes118
Size
52KB
MD5
47d581532b2460cc63c75ea6401a82a4
SHA1
bc61af3d4e41590ce7d70c5c52c9b447490f8629
SHA256
723745441ae84e0e74c3bd24d8181842df90d04eed32abc3260db81e93e5dd34
SHA512
ff43c9565f4d50a8784b1b68eaa918a8f4810a61187e1c7ede0f4abf49ece32d8c546b26ad565052c863657b9a4b15495c9233886e8117245145b4b8e9c17247
SSDEEP
1536:X2BuUGXBLbW/tcflmKHSsK1bpAOduofizvYr:XHXBLbWFsUWv
Checks for missing Authenticode signature.
resource |
---|
47d581532b2460cc63c75ea6401a82a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
lstrlenW
lstrlenA
GetShortPathNameA
GetModuleHandleA
WritePrivateProfileStringA
LocalFree
GetCurrentProcessId
LeaveCriticalSection
Process32Next
Process32First
CreateDirectoryA
GetCommandLineW
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
RemoveDirectoryA
WideCharToMultiByte
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetSystemDirectoryA
CreateProcessA
WaitForSingleObject
CloseHandle
GetExitCodeProcess
GetModuleFileNameA
Sleep
FreeLibrary
LoadLibraryA
GetProcAddress
MultiByteToWideChar
SetFileAttributesA
MoveFileA
DeleteFileA
CreateThread
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
_purecall
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
atoi
fopen
fseek
ftell
fread
fclose
strrchr
strcmp
strcat
sprintf
strlen
??3@YAXPAX@Z
strncpy
strchr
memset
strncmp
strcpy
strstr
memcpy
_strupr
??2@YAPAXI@Z
memcmp
wcsstr
_wcslwr
_access
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ