DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
73a65ffe78c0ca3f83390b31b2d5622b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
73a65ffe78c0ca3f83390b31b2d5622b_JaffaCakes118
Size
52KB
MD5
73a65ffe78c0ca3f83390b31b2d5622b
SHA1
80aa78b6793ef6c636778ad5855522037d9d2729
SHA256
7a8f00fdc76d8b1ab012ddf59bbcecebd655b42bce88bd410709477d504c5e36
SHA512
807c323e7ead938cced7ea7fd9154756f44b852b2a4c517a9d007e567dac9047a07a7ac9153364738db6cab7a615ae0d730adbd7d1c1bd571631fcbd753e88be
SSDEEP
768:hx5St/ZGlAl+psX8RRwJ2mYiPGatbMFDI1XbC02Jih54XhJ5Y5N:hv2w4X0pmYi/ApIn5iJS5
Checks for missing Authenticode signature.
resource |
---|
73a65ffe78c0ca3f83390b31b2d5622b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
FindNextFileA
DeleteFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
ExitProcess
Process32Next
Process32First
HeapDestroy
WideCharToMultiByte
GetCurrentProcessId
GetCommandLineW
Sleep
GetProcAddress
CreateThread
WritePrivateProfileStringA
GetExitCodeProcess
WaitForSingleObject
MoveFileA
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
CreateDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
LocalFree
FreeLibrary
LoadLibraryA
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
memcpy
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strcmp
fopen
fseek
ftell
fread
fclose
strncmp
strncpy
strchr
wcsstr
_wcslwr
memset
sprintf
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
_access
strcat
_strlwr
_purecall
memcmp
strrchr
strcpy
strlen
atoi
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ