DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7842bd06282c6d9bd038d6b9c4079b52_JaffaCakes118.dll
Resource
win7-20240705-en
Target
7842bd06282c6d9bd038d6b9c4079b52_JaffaCakes118
Size
48KB
MD5
7842bd06282c6d9bd038d6b9c4079b52
SHA1
584a70117c0b40a4aeee4f6da069599c70e09048
SHA256
59364cc88bf49b49e95afd0eb675d1abe5240c1b81b58c132507cf3392b35f0c
SHA512
9350dd7b8869481692ef17a133da15972ef39a630bc74d3cccee040a71c6bddf76cb76c36f98d8569c4dd47199eedeb49446aab9712672af494be2755e59b73a
SSDEEP
768:uEY7iyem7MJTRLUDGQez0u9fZFw8tlC67FbpEWXBbcFJTKu3oK0jhgRhwihXvU8U:pY7ih+MJTRLUKQez3x8NypEUBY6uKEww
Checks for missing Authenticode signature.
resource |
---|
7842bd06282c6d9bd038d6b9c4079b52_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Process32Next
Process32First
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
MultiByteToWideChar
GetShortPathNameA
GetModuleHandleA
ExitProcess
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
Sleep
MoveFileA
GetCommandLineW
CreateThread
LocalFree
RemoveDirectoryA
CreateProcessA
FreeLibrary
lstrlenW
WideCharToMultiByte
CreateDirectoryA
GetModuleFileNameA
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
CloseHandle
DeleteFileA
WritePrivateProfileStringA
GetProcAddress
LoadLibraryA
lstrlenA
BuildExplicitAccessWithNameA
RegSetValueExA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
fopen
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
atoi
strncmp
strchr
strncpy
memcmp
_purecall
memcpy
_access
strcmp
sprintf
wcsstr
_wcslwr
??3@YAXPAX@Z
fclose
fread
memset
??2@YAPAXI@Z
ftell
fseek
_strlwr
strcat
strrchr
strlen
strcpy
strstr
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ