DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4d35d6feb225f9095cf1708066e4a2d1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
4d35d6feb225f9095cf1708066e4a2d1_JaffaCakes118
Size
68KB
MD5
4d35d6feb225f9095cf1708066e4a2d1
SHA1
989ea27e3c2712577e9c58a3b1c00cda60c42c36
SHA256
405f8bc7758b9897c685f6c2985487c5902d65479b2c0f2fbc3a6679ef27e6a5
SHA512
8bcdf1447db30c8c6c139971779610751804c11e4697399da60a1c3a2202c3f54b4004f9efd0cf5552e9f1446d13d28321210c3049f60ba495b65ed3beecef54
SSDEEP
768:33zWgTFBZGSZBvD+201nZv+aG2XHTTZd2GKNEW2Dsw2q9xqfR+hg4VFwKG3:HzWgTF6eBvq20dZlZsptw2q9aRW0KG
Checks for missing Authenticode signature.
resource |
---|
4d35d6feb225f9095cf1708066e4a2d1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
GetExitCodeProcess
WaitForSingleObject
CreateDirectoryA
SetFileAttributesA
GetCurrentProcessId
LocalFree
LeaveCriticalSection
EnterCriticalSection
Sleep
DisableThreadLibraryCalls
CloseHandle
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Process32Next
Process32First
GetCommandLineW
ExitProcess
WritePrivateProfileStringA
MoveFileA
CreateThread
RemoveDirectoryA
CreateProcessA
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
FindFirstFileA
GetPrivateProfileStringA
DeleteFileA
FindNextFileA
InitializeCriticalSection
SetEntriesInAclA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
GetNamedSecurityInfoA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
strrchr
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
_purecall
memcpy
strncmp
strncpy
strchr
atoi
strcmp
strstr
??3@YAXPAX@Z
fclose
fread
memset
??2@YAPAXI@Z
ftell
fseek
fopen
strcat
_strupr
sprintf
memcmp
strlen
strcpy
_access
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ