DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5bdac324cf2973f01222b4e16bf58e39_JaffaCakes118.dll
Resource
win7-20240704-en
Target
5bdac324cf2973f01222b4e16bf58e39_JaffaCakes118
Size
36KB
MD5
5bdac324cf2973f01222b4e16bf58e39
SHA1
c713f05765568de37847fce14b8a5f91a8ce1cd0
SHA256
d091aaf7edcf2c8af1d9d86f51ec092a9797f5f61e9475ab49298d1e674302c3
SHA512
d3179af01921fd3dd541a9ced6a12390fa10f7fe3bf8deb01700b36742c4277d6ced7e5d72b7a287ed8cfd105e7e358d9ed57376cdf338544e67dc1449556ce3
SSDEEP
768:mZSy/x/lSBrsZlMjZQ0I94rdrXiLy3XmoET:m5/x/4BriOfe4rdrmys
Checks for missing Authenticode signature.
resource |
---|
5bdac324cf2973f01222b4e16bf58e39_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateProcessA
GetModuleFileNameA
GetSystemDirectoryA
GetCurrentProcessId
CreateThread
WideCharToMultiByte
lstrlenW
lstrlenA
GetExitCodeProcess
WaitForSingleObject
MultiByteToWideChar
DeleteFileA
CreateToolhelp32Snapshot
FindNextFileA
FindFirstFileA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetCommandLineW
Process32Next
SetFileAttributesA
MoveFileA
ExitProcess
FreeLibrary
Sleep
LoadLibraryA
Process32First
FindWindowExA
IsWindow
SetWindowTextA
SendMessageA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
strncmp
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_purecall
memcpy
??2@YAPAXI@Z
strcat
memcmp
strrchr
strcmp
strcpy
??3@YAXPAX@Z
sprintf
strlen
strstr
memset
wcsstr
_wcslwr
strncpy
strchr
_strupr
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
DnsQuery_A
inet_ntoa
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ