DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4c736ab88e8d38ced1f42f63f7bf9246_JaffaCakes118.dll
Resource
win7-20240704-en
Target
4c736ab88e8d38ced1f42f63f7bf9246_JaffaCakes118
Size
52KB
MD5
4c736ab88e8d38ced1f42f63f7bf9246
SHA1
da2114e9d8f67e6d014e48a7ff126c9e0d86a2f7
SHA256
0c8d7ee31c1058a6c2276213830a0ad32a611ab61e3fc1ecaac78d7e3d690187
SHA512
df53fd65dc9b7cee7d053f37cb91c415dd2032877d886429318f76ab55795f4d141626a369e237cc63589aaee4c07c40ba552d9a8df9c05d532259024bfa191e
SSDEEP
768:9gWTZsRKphKtXSpywhvSqLsZ8KNiQ3n9IzlDuh5j1EaHme91jI8MZSD7n8vUOS46:2MG9tXS/SqIawhX9IzQhv1BMowvO46
Checks for missing Authenticode signature.
resource |
---|
4c736ab88e8d38ced1f42f63f7bf9246_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
GetCurrentProcessId
DeleteFileA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
CreateDirectoryA
GetProcAddress
LoadLibraryA
Sleep
GetExitCodeProcess
CloseHandle
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
MoveFileA
SetFileAttributesA
FreeLibrary
Process32Next
Process32First
RemoveDirectoryA
GetCommandLineW
LocalFree
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
CreateThread
WritePrivateProfileStringA
ExitProcess
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegQueryValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
CoUninitialize
SysFreeString
LoadRegTypeLi
SysStringLen
VariantClear
SysAllocString
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
memset
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
strcpy
strncmp
strncpy
_access
strcmp
strrchr
strcat
fopen
fseek
ftell
fread
sprintf
??3@YAXPAX@Z
memcpy
_purecall
??2@YAPAXI@Z
memcmp
_strupr
atoi
strchr
strstr
strlen
fclose
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ