DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
772dcc2631476837fc4be879d395fe4b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
772dcc2631476837fc4be879d395fe4b_JaffaCakes118.dll
Resource
win10v2004-20240729-en
Target
772dcc2631476837fc4be879d395fe4b_JaffaCakes118
Size
48KB
MD5
772dcc2631476837fc4be879d395fe4b
SHA1
f2e969e8d36361aec94544a3214bbc2652592c8b
SHA256
29b1921e661e50fd77aa55091f1a6783f895cb293c3535ee8f888759b2fc1ea4
SHA512
b5d51dcdd890dc335d6b12a36a9c8326b8197344e893be716e75e7052714ddd7482a3a945feaeb6e1ce40b3b1e46557d98359aa9cdd60e5c38c468543a27ab3e
SSDEEP
768:CposEdL3ZkRKZN+zihzfeQuc5BRkssrDeFnRinoPc+prTCQRUKoGRZ3eaQdYA:SxmCWmmzm5cksnlRioE+prTCQuNUea5
Checks for missing Authenticode signature.
resource |
---|
772dcc2631476837fc4be879d395fe4b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
WritePrivateProfileStringA
FindNextFileA
SetFileAttributesA
GetPrivateProfileStringA
InterlockedDecrement
GetCommandLineW
WideCharToMultiByte
ExitProcess
FreeLibrary
GetExitCodeProcess
WaitForSingleObject
MoveFileA
GetCurrentProcessId
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
CreateThread
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
LoadLibraryA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
LocalFree
Sleep
Process32First
CloseHandle
Process32Next
FindFirstFileA
RegDeleteKeyA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoMarshalInterThreadInterfaceInStream
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
strstr
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strcmp
fopen
fseek
ftell
fread
fclose
strrchr
strcat
_access
atoi
strchr
strcpy
sprintf
strncpy
memset
strncmp
strlen
wcsstr
_wcslwr
_strupr
??3@YAXPAX@Z
memcpy
_purecall
??2@YAPAXI@Z
memcmp
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ