DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
84e5aeae909f01fd4414bd9d78b276df_JaffaCakes118.dll
Resource
win7-20240708-en
Target
84e5aeae909f01fd4414bd9d78b276df_JaffaCakes118
Size
60KB
MD5
84e5aeae909f01fd4414bd9d78b276df
SHA1
12d10c4e2ee4673ff58f093527e02ec43973696f
SHA256
753e86093339c8eae5a6094cd0729eede0b8db6bf0b7f002e7c56bf6bd70bd24
SHA512
790f44ec0380e411c94974168dddb7f2d6bcff591e78643d58105c1b8a1476c9f874205b3ca08a7ace71e58388c7065d0a1a0505eb0097727174d967051f974d
SSDEEP
768:0UMYPmPz9UL4/ZIYDmBijZ/6veyUdNstvQeEcFRMvgze5Dgo:fuPiL4yXyryUDIvQeXF8j5Dgo
Checks for missing Authenticode signature.
resource |
---|
84e5aeae909f01fd4414bd9d78b276df_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
WritePrivateProfileStringA
ExitProcess
Sleep
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
CreateDirectoryA
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
GetExitCodeProcess
InterlockedDecrement
HeapDestroy
lstrlenA
GetShortPathNameA
GetModuleHandleA
Process32Next
Process32First
GetCommandLineW
GetProcAddress
GetCurrentProcessId
RemoveDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
CreateThread
LoadLibraryA
FreeLibrary
LocalFree
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
WideCharToMultiByte
lstrlenW
InterlockedIncrement
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryValueExA
RegDeleteKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
strcat
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
atoi
strncmp
strchr
strncpy
_wcslwr
wcsstr
memcmp
_purecall
memcpy
sprintf
strlen
??3@YAXPAX@Z
memset
fclose
fread
??2@YAPAXI@Z
ftell
fseek
fopen
_strupr
strrchr
strcpy
_access
strstr
strcmp
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ