DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6234c7c9fe3a2567b46d31557ce02f24_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6234c7c9fe3a2567b46d31557ce02f24_JaffaCakes118
Size
60KB
MD5
6234c7c9fe3a2567b46d31557ce02f24
SHA1
8f58cbb5d6c28b47c615784880c14463da8da9ec
SHA256
196a9146a891411da9c71a4ae9fe2761e54c02c1369c6fa12ba709119bbf31ad
SHA512
960f75ce25a3dd7054ffc01bda0f1664c20553e197b0871bc4f62587c21f726eb6521d33c6955596eec1f94c69b7db198765e8f890f184a4b9de2335fde87587
SSDEEP
768:d227cou3Z0daVW/yTxILkVbXJMcfh3aMTLR9Z83NiABxS3Bg39eES76eL1GB8T2s:77oyby90oJ759mNBM3e39eE6oB8CaJ
Checks for missing Authenticode signature.
resource |
---|
6234c7c9fe3a2567b46d31557ce02f24_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
MoveFileA
DeleteFileA
SetFileAttributesA
FindNextFileA
GetPrivateProfileStringA
DeleteCriticalSection
Sleep
WideCharToMultiByte
GetProcAddress
WritePrivateProfileStringA
GetCommandLineW
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
RemoveDirectoryA
CreateDirectoryA
InitializeCriticalSection
DisableThreadLibraryCalls
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
ExitProcess
CreateThread
LocalFree
LoadLibraryA
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
Process32First
CloseHandle
Process32Next
FindFirstFileA
RegEnumKeyExA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegDeleteKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
??2@YAPAXI@Z
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_access
fopen
fseek
ftell
fread
fclose
strcat
strcmp
strncmp
atoi
strchr
strcpy
??3@YAXPAX@Z
sprintf
wcsstr
_wcslwr
memset
memcpy
_purecall
_strupr
memcmp
strlen
strstr
strrchr
strncpy
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ