DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
703182c0bd8607ab22bd8e5979760384_JaffaCakes118.dll
Resource
win7-20240705-en
Target
703182c0bd8607ab22bd8e5979760384_JaffaCakes118
Size
76KB
MD5
703182c0bd8607ab22bd8e5979760384
SHA1
a216cf18800e05fd9bbd19cc191910423fbdbe22
SHA256
1ee1482919bb28f9a6b9ded5312ed992945ceb113e0104d9153eaf89a7be8e74
SHA512
474de32b068859dcf141a8353a78cb792033429712b8ff1520e5e22a79f04b824464c3a4e3d8bd8c6d7627a14c79cd4f3583db4cfcd62640426bd5a40ca69ef0
SSDEEP
1536:NDwOHfT7q3BZhDmz7JObDTPXigDwyiYR0pyO69:r7KBXizWPyKie0pE
Checks for missing Authenticode signature.
resource |
---|
703182c0bd8607ab22bd8e5979760384_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
CreateThread
GetCommandLineW
GetCurrentProcessId
RemoveDirectoryA
FreeLibrary
ExitProcess
Process32Next
Process32First
MoveFileA
WideCharToMultiByte
CreateDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
WaitForSingleObject
CloseHandle
GetExitCodeProcess
LocalFree
LoadLibraryA
GetProcAddress
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
WritePrivateProfileStringA
FindNextFileA
GetModuleHandleA
RegCreateKeyExA
RegEnumKeyExA
RegSetValueExA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegQueryInfoKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
fseek
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
strcmp
strncmp
strncpy
strlen
_access
strcpy
strchr
atoi
memcmp
sprintf
strstr
memset
strrchr
strcat
??3@YAXPAX@Z
fclose
fread
??2@YAPAXI@Z
ftell
_stricmp
fopen
wcsstr
_wcslwr
memcpy
_purecall
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ