DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6af29c6706a4e9b8f8806889c842cbee_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6af29c6706a4e9b8f8806889c842cbee_JaffaCakes118
Size
60KB
MD5
6af29c6706a4e9b8f8806889c842cbee
SHA1
df0517a4a49b59b1b7742ad3f09b0d5a2eb9bbcb
SHA256
96ba8d1eff6763c15e6fa5c0812ec0c5cbd7e4ae6bf100ded707c2db26a99224
SHA512
51c068f22ad6dae3fd00fcfb2fb8b967e63c2d8a84e74957412ebd8dd4d38accdc492346d7f794344e8cf6b905e247e9c8c376d6ef6c76f71f3d15e70541790a
SSDEEP
768:Ixcco+rh/h0h5nZm2fqNY9MfHQ3Sl6JouOo0HaGCQRRGIaXh1aivLnEgHT:Imql4A2CpPoSQyoYCQ61NLEg
Checks for missing Authenticode signature.
resource |
---|
6af29c6706a4e9b8f8806889c842cbee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
LoadLibraryA
CreateDirectoryA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetCurrentProcessId
GetProcAddress
EnterCriticalSection
GetPrivateProfileStringA
FindFirstFileA
RemoveDirectoryA
WritePrivateProfileStringA
ExitProcess
LocalFree
Sleep
Process32Next
Process32First
CreateThread
LeaveCriticalSection
WideCharToMultiByte
lstrlenA
lstrlenW
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
WaitForSingleObject
CloseHandle
GetCommandLineW
GetExitCodeProcess
FindNextFileA
RegEnumKeyExA
RegDeleteKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strrchr
_strupr
_strlwr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
strchr
atoi
strcpy
_purecall
_access
strcat
fopen
wcsstr
_wcslwr
memset
sprintf
strstr
strlen
memcmp
memcpy
??3@YAXPAX@Z
strcmp
_stricmp
fclose
fread
??2@YAPAXI@Z
ftell
fseek
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ