DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
602eabd4356605ae61b72add988086cd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
602eabd4356605ae61b72add988086cd_JaffaCakes118
Size
52KB
MD5
602eabd4356605ae61b72add988086cd
SHA1
0b381326339608e7615fc50014a6ef1b1dd9eb31
SHA256
442c63fb60de92f4394a9c2eac1555754dae27b8ec59af2f105b93508f02deb8
SHA512
7b2d78fe082fe56088858a4a62fbb0aee0aa66d7536b76410adecfe5c3d4d4f705c0cb976f26a14dfcebbb7a2455685f09a9f914d25bc967b6b4ab7c79a283ca
SSDEEP
1536:P3SiMrCi9tLnzre9ldTMJYgn7bCMwYJcx:pAn6Lm9/CPYJ
Checks for missing Authenticode signature.
resource |
---|
602eabd4356605ae61b72add988086cd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
MoveFileA
SetFileAttributesA
GetCurrentProcessId
CloseHandle
Process32Next
Process32First
LocalFree
CreateProcessA
RemoveDirectoryA
WritePrivateProfileStringA
WideCharToMultiByte
WaitForSingleObject
GetSystemDirectoryA
CreateThread
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
ExitProcess
lstrlenA
MultiByteToWideChar
FindFirstFileA
GetPrivateProfileStringA
DeleteFileA
FindNextFileA
CreateDirectoryA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
FreeLibrary
GetCommandLineW
EnterCriticalSection
Sleep
LeaveCriticalSection
GetExitCodeProcess
SetNamedSecurityInfoA
GetNamedSecurityInfoA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
_access
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
_purecall
memcpy
fopen
fseek
ftell
fread
fclose
atoi
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
strncpy
strchr
memset
strncmp
strlen
strcpy
wcsstr
_wcslwr
_strupr
strcat
strstr
strrchr
strcmp
memcmp
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ