DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
75258315ff775f6d6ee2129d6120f059_JaffaCakes118.dll
Resource
win7-20240705-en
Target
75258315ff775f6d6ee2129d6120f059_JaffaCakes118
Size
52KB
MD5
75258315ff775f6d6ee2129d6120f059
SHA1
dfae900fcd9a7c13344b57f6f0cc739b726fc7f7
SHA256
c923cebeb57aac6699d723a7ea91c8ca51335b328175a48685e8340724b68511
SHA512
e8ff40b74a0b354698b34784ea19c19dc75ec2164b1b16a7c13b62dd087ad1c70e4de8cce5b7ace84aa15a9c03be71df97381973b95f767b6ee2caf21dd2cf95
SSDEEP
768:RJc7VyWqqoPFCgZFfZkmOiCSafhq9RQRSqa9Sk+FDs80zaz9vCkAcmhOlhq0:078WqqoPFB5CS5RRIk+FDhahOlhq0
Checks for missing Authenticode signature.
resource |
---|
75258315ff775f6d6ee2129d6120f059_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCommandLineW
ExitProcess
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Process32Next
DeleteFileA
CreateDirectoryA
GetCurrentProcessId
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
CreateThread
WritePrivateProfileStringA
GetExitCodeProcess
WaitForSingleObject
MoveFileA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
SetFileAttributesA
LocalFree
Sleep
GetSystemDirectoryA
GetModuleFileNameA
CloseHandle
CreateProcessA
Process32First
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegDeleteKeyA
RegCreateKeyExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
memcmp
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strcmp
atoi
strstr
_access
_purecall
memcpy
strrchr
strcat
fopen
wcsstr
_wcslwr
memset
sprintf
strncpy
strchr
strncmp
strlen
strcpy
_strupr
??3@YAXPAX@Z
fclose
fread
??2@YAPAXI@Z
ftell
fseek
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ