DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
72b2ff63163fdeb8de12804f9930afd9_JaffaCakes118.dll
Resource
win7-20240704-en
Target
72b2ff63163fdeb8de12804f9930afd9_JaffaCakes118
Size
52KB
MD5
72b2ff63163fdeb8de12804f9930afd9
SHA1
b441eaa293300fc5602d64d3203056605f3a6a7f
SHA256
915c2e7b14b81f4cf1f57685ec177bc23b8bfc26e3c3530c81accc0f69d52f4c
SHA512
c19de0d1bf4d0e5be21121b673bc701064ae029e813c428d46b887fa74461597367aed2d64e33a7e89745aa1373eb2b6b7663f2efba3a7c31ffd14f7c9777d6a
SSDEEP
1536:BK5YJlDMiZnZKkAKnkYIZXnYVsRQcMhw:w5Y7DxzFC/VRl
Checks for missing Authenticode signature.
resource |
---|
72b2ff63163fdeb8de12804f9930afd9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
FindNextFileA
SetFileAttributesA
WideCharToMultiByte
FindFirstFileA
LocalFree
Process32Next
Process32First
RemoveDirectoryA
CreateDirectoryA
ExitProcess
CreateThread
GetCommandLineW
MoveFileA
DeleteFileA
WaitForSingleObject
GetExitCodeProcess
Sleep
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
lstrlenA
MultiByteToWideChar
GetCurrentProcessId
FreeLibrary
LoadLibraryA
WritePrivateProfileStringA
GetProcAddress
GetPrivateProfileStringA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
fread
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
atoi
_wcslwr
wcsstr
strcmp
_access
_purecall
memcpy
memcmp
strrchr
sprintf
??3@YAXPAX@Z
memset
strncpy
strchr
strncmp
strlen
strcpy
strstr
fclose
_strupr
??2@YAPAXI@Z
ftell
fseek
fopen
strcat
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ