DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5b79002805b0bd054da1d32f8c1d1887_JaffaCakes118.dll
Resource
win7-20240704-en
Target
5b79002805b0bd054da1d32f8c1d1887_JaffaCakes118
Size
12KB
MD5
5b79002805b0bd054da1d32f8c1d1887
SHA1
1a9b45b8d56344a40fcefab2b1d9c1c90cfe2557
SHA256
91348cffe0810c20b9dfa8b86c7944b6119504055fb1ad97c664b2aba529d4fd
SHA512
f009715d782cebf1fefcf91374bd057506d6b34ed1c822726220ef9bdd931ec7ab2de250a75b875991ce56d0bfbc547b01b1fad53108e8c341df9c34889b30f1
SSDEEP
384:D3K8+mAYusPNJeoBHQ/IGgnTZkBCzNY+W5s:D3K8nFTHnrvZkBCm+W5s
Checks for missing Authenticode signature.
resource |
---|
5b79002805b0bd054da1d32f8c1d1887_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
??2@YAPAXI@Z
strrchr
??3@YAXPAX@Z
srand
rand
_strupr
strstr
sprintf
_CxxThrowException
_except_handler3
?terminate@@YAXXZ
LocalFree
CreateThread
DeleteFileA
CloseHandle
CreateToolhelp32Snapshot
CreateMutexA
ExitProcess
CreateFileA
lstrlenA
MoveFileExA
GetCurrentProcess
Process32First
GetTickCount
ExpandEnvironmentStringsA
WriteFile
OpenProcess
TerminateThread
Sleep
TerminateProcess
FindFirstFileA
GetLastError
SetFileAttributesA
FindClose
Process32Next
GetModuleFileNameA
FindNextFileA
ShowWindow
SendMessageA
FindWindowA
wsprintfA
FindWindowExA
RegCloseKey
AdjustTokenPrivileges
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
LookupPrivilegeValueA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
OpenProcessToken
ShellExecuteA
InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ