DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5d4b43c30a7e9c0863bed913c621c4da_JaffaCakes118.dll
Resource
win7-20240708-en
Target
5d4b43c30a7e9c0863bed913c621c4da_JaffaCakes118
Size
52KB
MD5
5d4b43c30a7e9c0863bed913c621c4da
SHA1
ca7aa606dd3349c6ed1a6adf7a7f4f81fd405ecd
SHA256
18931cdf0063e9dbfa80335275be9dd0241aa0a13f2425fa5a50815b71179490
SHA512
486ba88080f4e157d83117b8e6e1d36f0f4c3abaaa20fe966e49883cf43486a54378946fc1d994082d882c6392b9d1afe0c30bd5ca5e1dd7b625f2a1f673c606
SSDEEP
768:OcVNI3ZlOIxTvNN6T5wHJLt6nmAL7lUBxdcYZWEb9CjVFJ8XEDlGev:OO2WUk5wpLti3lPCWEUjVFJLDlGev
Checks for missing Authenticode signature.
resource |
---|
5d4b43c30a7e9c0863bed913c621c4da_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
CreateDirectoryA
GetCommandLineW
FreeLibrary
WideCharToMultiByte
CloseHandle
CreateProcessA
GetSystemDirectoryA
FindNextFileA
Process32First
LocalFree
MoveFileA
ExitProcess
WritePrivateProfileStringA
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
CreateThread
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
DisableThreadLibraryCalls
Process32Next
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
strrchr
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
strcmp
fopen
fseek
ftell
fread
fclose
_wcslwr
wcsstr
strncmp
??3@YAXPAX@Z
atoi
strchr
memcpy
_purecall
??2@YAPAXI@Z
memcmp
memset
strstr
_stricmp
sprintf
strcat
_access
strcpy
strlen
strncpy
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ