DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
74bdb33e12deb73f07d59c0b301aa081_JaffaCakes118.dll
Resource
win7-20240704-en
Target
74bdb33e12deb73f07d59c0b301aa081_JaffaCakes118
Size
56KB
MD5
74bdb33e12deb73f07d59c0b301aa081
SHA1
afea1cedb87cf9f144c5047cd4dfa1378ec747fd
SHA256
17603b9c37ba44b065b3c147425675b24d674185c348f5bfdda34cc4d847ecff
SHA512
5ac052f59471b8e5490109c436748bb0ea63d8e4c36753101d26d0e83c3dacdc43d4f9fdc3b8ce4c14f9ef8df025d13559ba4196d717eb254469f683e76706fb
SSDEEP
1536:bD/FQFPa6NzFXExxlo5FxP2vhYqDbJkbSLGSOHIbi5VIUSz+oZvji:bya6fv5fAk2USz+ovj
Checks for missing Authenticode signature.
resource |
---|
74bdb33e12deb73f07d59c0b301aa081_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
SetFileAttributesA
MoveFileA
Process32Next
Process32First
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
FreeLibrary
InterlockedIncrement
LoadLibraryA
LocalFree
WritePrivateProfileStringA
Sleep
GetCurrentProcessId
GetCommandLineW
CreateThread
CreateDirectoryA
ExitProcess
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
CloseHandle
CreateProcessA
FindFirstFileA
GetPrivateProfileStringA
DeleteFileA
FindNextFileA
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
GetProcAddress
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
wcsstr
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
_access
strncmp
strncpy
strcmp
strchr
atoi
fopen
fseek
ftell
memcmp
memcpy
??3@YAXPAX@Z
sprintf
strstr
??2@YAPAXI@Z
strrchr
strcat
strcpy
memset
_stricmp
_wcslwr
strlen
_purecall
fclose
fread
SHDeleteKeyA
SHSetValueA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ