DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
70e457f2e8b9ee0852fa06811dd661ca_JaffaCakes118.dll
Resource
win7-20240704-en
Target
70e457f2e8b9ee0852fa06811dd661ca_JaffaCakes118
Size
76KB
MD5
70e457f2e8b9ee0852fa06811dd661ca
SHA1
8231d0394d7d8df4d57084e287b1bd6f04758caf
SHA256
c094a624a6bd278ea8acbffef109f63758f975bafe4dabb02d9dd2051b2b250f
SHA512
5df559ef5fb4582d97096eef698709ff2650d1b19a9bf5c1266e3f77cafb086d0124aba6aab086fedbc2d5658a80749af00bb589cda92d1d7ad72f7f228ed6cf
SSDEEP
1536:/zamy2c89jWMcCNzpPWQQNP+1hCjTnXzEwBfNjzwfF:8G8oq+1gfnLfNvU
Checks for missing Authenticode signature.
resource |
---|
70e457f2e8b9ee0852fa06811dd661ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
CreateDirectoryA
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
CloseHandle
Process32Next
Process32First
CreateThread
Sleep
GetCommandLineW
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
ExitProcess
lstrlenA
GetProcAddress
LoadLibraryA
FreeLibrary
lstrlenW
WideCharToMultiByte
GetCurrentProcessId
MultiByteToWideChar
SetFileAttributesA
MoveFileA
DeleteFileA
RemoveDirectoryA
LocalFree
CreateProcessA
GetSystemDirectoryA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryValueExA
RegCreateKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
_wcslwr
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
fopen
fseek
ftell
fread
fclose
_purecall
strcmp
memset
strcat
strcpy
_access
sprintf
strlen
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
wcsstr
_strlwr
atoi
strchr
memcmp
strrchr
memcpy
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ