DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
701218cb9c2c2d14b7a1e525234becf6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
701218cb9c2c2d14b7a1e525234becf6_JaffaCakes118
Size
44KB
MD5
701218cb9c2c2d14b7a1e525234becf6
SHA1
6d376d4dcf63d9582876b19d6a28035a7b7ce0be
SHA256
003776b698619f68d451b2aa9a6b9b7e199eae8fff90752be93db24513b5810f
SHA512
3c80c28af988191ef5ca81422a5c0e2f9df227bb6a8ab27ac6476fc5cddc85224547f764cf2ee858fa564796932873bf9c396c10043183941c3a695929d7c07f
SSDEEP
768:6eet+Ho0mlM8q6/AIBZKPZPkqREgoKpHW6G:be8I0x85de6Z4W6G
Checks for missing Authenticode signature.
resource |
---|
701218cb9c2c2d14b7a1e525234becf6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
GetModuleFileNameA
MoveFileA
DeleteFileA
SetFileAttributesA
GetCurrentProcessId
Sleep
CloseHandle
Process32Next
Process32First
FindNextFileA
FindFirstFileA
LeaveCriticalSection
EnterCriticalSection
CreateProcessA
WideCharToMultiByte
ExitProcess
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
GetCommandLineW
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
CreateThread
SetWindowTextA
FindWindowExA
IsWindow
SendMessageA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoCreateInstance
CoInitialize
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
strrchr
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strncmp
strchr
strncpy
_purecall
??2@YAPAXI@Z
_wcslwr
wcsstr
strcat
strcpy
memcpy
??3@YAXPAX@Z
memcmp
strstr
strcmp
_strupr
sprintf
strlen
memset
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ