DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
610a37a4ff3fa404ae81ddb6e9a830db_JaffaCakes118.dll
Resource
win7-20240708-en
Target
610a37a4ff3fa404ae81ddb6e9a830db_JaffaCakes118
Size
48KB
MD5
610a37a4ff3fa404ae81ddb6e9a830db
SHA1
0e310c1e8bfaa1c61ffca4434851bd1a975f5a3f
SHA256
2279d473c07fdabb9b58479828923ef6af6741f6facafa14956527ad0477726b
SHA512
093361e21d3e78b21f58269d41dbaa867757ebae2b815432a1b05c7740daafad2a700765804018acbca46ac172b41ce2b8820659f2cbfe15ad319e9292cd139f
SSDEEP
768:TLXOe9Ee17AsqVQpKDmYz7DS0cxrHiNzvuNtdw26z0tN7Zn7Ed3upPlDhFZ79z:TLee9E/sdKDfz74xgzWNcVudEglDhFN
Checks for missing Authenticode signature.
resource |
---|
610a37a4ff3fa404ae81ddb6e9a830db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCommandLineW
ExitProcess
GetCurrentProcessId
lstrlenA
WideCharToMultiByte
lstrlenW
FreeLibrary
CreateDirectoryA
RemoveDirectoryA
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
Sleep
WritePrivateProfileStringA
Process32Next
Process32First
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
CreateProcessA
WaitForSingleObject
CloseHandle
GetExitCodeProcess
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
GetModuleFileNameA
LocalFree
CreateThread
SetNamedSecurityInfoA
GetNamedSecurityInfoA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
_access
_strupr
_strlwr
_adjust_fdiv
malloc
_initterm
free
_purecall
strncmp
strncpy
fopen
fseek
ftell
fread
fclose
_wcslwr
sprintf
strstr
strcmp
strrchr
strlen
memset
strcat
??3@YAXPAX@Z
??2@YAPAXI@Z
strcpy
_stricmp
memcmp
memcpy
atoi
strchr
wcsstr
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ