DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5b52524885f4104ed9f49540455ad20d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
5b52524885f4104ed9f49540455ad20d_JaffaCakes118
Size
68KB
MD5
5b52524885f4104ed9f49540455ad20d
SHA1
2a01c6a326a693c0bd7196f348e2f2a9494291d6
SHA256
d0456c6bd9f2cc0e7c362d495fc2854b392fe5e5c384aeebd6c49c164ad0f030
SHA512
493781107855ebdfd37c6c413f063bc7acfcabedc80f28376808375b64737414d9946aa572c619f8f9c8907a2d6cf9110974c105211fbc9a9f48150b4edda77e
SSDEEP
768:pKwzkrPcuaGMc1g5nm+D4fZkGTlBnYtKfEfEBFSqzvL4D/HcS1qMn7qr240fj/5n:/U0uaG3UnVqtIg+knvA5n7qrd0fjgge
Checks for missing Authenticode signature.
resource |
---|
5b52524885f4104ed9f49540455ad20d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
CreateProcessA
RemoveDirectoryA
GetCommandLineW
GetCurrentProcessId
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
ExitProcess
GetModuleHandleA
CloseHandle
Process32Next
Process32First
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
MoveFileA
WritePrivateProfileStringA
CreateDirectoryA
LocalFree
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
CreateThread
GetModuleFileNameA
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
DeleteFileA
GetShortPathNameA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryValueExA
RegDeleteKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
strchr
_strupr
_strlwr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
atoi
_wcslwr
wcsstr
??2@YAPAXI@Z
??3@YAXPAX@Z
strstr
memset
strrchr
sprintf
strcat
strcmp
memcmp
strlen
strncpy
_stricmp
strncmp
strcpy
_access
memcpy
_purecall
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ