DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
757f7b5cdbed5dd2b1e0e15782cc928c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
757f7b5cdbed5dd2b1e0e15782cc928c_JaffaCakes118
Size
44KB
MD5
757f7b5cdbed5dd2b1e0e15782cc928c
SHA1
ca65aa5f8c06185fb68c828a67608629447e9f26
SHA256
d53fd39de8540cb4afb5b1788c1f8fb9842af1a5d70790be6ee53f2c338fbe1f
SHA512
f71751a780e141ad72111c010be756859af37d5d41ba9d28d74f25e9b801d66e40d690df449734d75242c9408cd33bc30fb98663e2e6104e46f4e89cbdfadaf8
SSDEEP
768:v9HnTZiKBWkOUjUMRnnjDYxJ1aU0tCbg7Q8riM:v9z6kOUjUzxXSemQ82M
Checks for missing Authenticode signature.
resource |
---|
757f7b5cdbed5dd2b1e0e15782cc928c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
WideCharToMultiByte
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
CreateThread
GetCurrentProcessId
Sleep
MultiByteToWideChar
DeleteFileA
SetFileAttributesA
CloseHandle
CreateProcessA
GetSystemDirectoryA
FindNextFileA
FindFirstFileA
GetExitCodeProcess
WaitForSingleObject
Process32Next
Process32First
lstrlenW
GetProcAddress
GetCommandLineW
GetModuleFileNameA
ExitProcess
LoadLibraryA
MoveFileA
FreeLibrary
SetWindowTextA
IsWindow
FindWindowExA
SendMessageA
RegEnumKeyExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoInitialize
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strcmp
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
strcat
strcpy
strncmp
strchr
strncpy
memset
strlen
_purecall
??3@YAXPAX@Z
sprintf
strstr
??2@YAPAXI@Z
_stricmp
strrchr
memcmp
memcpy
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ