DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6136810a24d6bd50cfa2701d4aa0ab47_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6136810a24d6bd50cfa2701d4aa0ab47_JaffaCakes118
Size
36KB
MD5
6136810a24d6bd50cfa2701d4aa0ab47
SHA1
32ee54997d0bf8f19849f22f30e08447d8b9e8b3
SHA256
22e5b769a3921fd6be5b211c5c0f5d124f384bbfdb8ec638adc1ab704830af6d
SHA512
cc3fbed677d8ed79b375cc060a1958abd0cd21ab2ef00d5d0e10d92d0e11fb584940fdeab8a401ea44b2fb805e46f65b308c1164446f0400c61a77412a93c91a
SSDEEP
768:1fvxneo7ZAYwtk87UissFxAQjbo2lwULS70GODWmgXbZr:txnzTZisuxAQjc2Vu70GO9gXbZr
Checks for missing Authenticode signature.
resource |
---|
6136810a24d6bd50cfa2701d4aa0ab47_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
CloseHandle
GetCurrentProcessId
CreateThread
GetCommandLineW
MoveFileA
DeleteFileA
SetFileAttributesA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
lstrlenW
HeapDestroy
GetShortPathNameA
GetModuleHandleA
ExitProcess
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
Sleep
Process32Next
Process32First
CreateToolhelp32Snapshot
FindNextFileA
FindFirstFileA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
LoadLibraryA
InterlockedDecrement
FreeLibrary
IsWindow
SendMessageA
FindWindowExA
SetWindowTextA
RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoInitialize
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
_strupr
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strcat
strrchr
strcpy
_purecall
??2@YAPAXI@Z
strstr
memcpy
strlen
memset
sprintf
memcmp
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ