DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
74e922ea00e376c37c4dcfc78c7aea68_JaffaCakes118.dll
Resource
win7-20240704-en
Target
74e922ea00e376c37c4dcfc78c7aea68_JaffaCakes118
Size
52KB
MD5
74e922ea00e376c37c4dcfc78c7aea68
SHA1
c65e05ad7ab0d7c10219ca022ca826414b7f4eb2
SHA256
20eb0637727a6cbd737133bb0c9d4019aa901c97a58cc26487c8035731c15052
SHA512
58a642bc93dff4985a34f0dbb320b8733de7cf81697d347321244f183827fa9626d5b95f8c207f8446c8e8d28d0dc194e4842c1e82479f62471a563c81c17b2b
SSDEEP
1536:YQtIyR1x4lvaRFFN+vLnz1e2AWVeURnJ:PZR12J2zA9ey4UR
Checks for missing Authenticode signature.
resource |
---|
74e922ea00e376c37c4dcfc78c7aea68_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
CreateProcessA
GetSystemDirectoryA
LocalFree
Sleep
RemoveDirectoryA
FreeLibrary
LoadLibraryA
GetProcAddress
WideCharToMultiByte
FindNextFileA
GetModuleHandleA
FindFirstFileA
Process32Next
Process32First
CreateDirectoryA
WritePrivateProfileStringA
GetCommandLineW
GetCurrentProcessId
CreateThread
GetExitCodeProcess
WaitForSingleObject
GetShortPathNameA
lstrlenA
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
CloseHandle
ExitProcess
GetPrivateProfileStringA
RegEnumKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
CoInitialize
CoUninitialize
SysFreeString
LoadRegTypeLi
SysStringLen
SysAllocString
VariantClear
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
memcpy
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
atoi
fopen
fseek
ftell
fread
fclose
strcmp
_wcslwr
wcsstr
strncmp
strchr
strncpy
strrchr
strlen
memset
strcat
strcpy
sprintf
strstr
_strlwr
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
_access
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ