DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
861e76bbe9cedf13f174e795b7580a55_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
861e76bbe9cedf13f174e795b7580a55_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
861e76bbe9cedf13f174e795b7580a55_JaffaCakes118
Size
48KB
MD5
861e76bbe9cedf13f174e795b7580a55
SHA1
e02a9cdffd6df310f401dabd215ab6deb4e5f116
SHA256
55f809cb1340c030dbb31df08824ce7b7153c7cc0cee4b0eefd01669e7a9689d
SHA512
cf039444d0b0dab343a48420442f2c710c7005d1deff7f1b249bb595bd3f6f8de8c4a3d7b0e04b4911bfc784afbe3f3bbb574e796f313bb6898a2e1542694b5c
SSDEEP
768:wBaSBdonRKQnZ8H0jZ5U3yWueXCmcdu87JlvzY6tKmGPVNkMa5OxWGkAA:wzYFeUZmXCx5ptKlPVNlaIWa
Checks for missing Authenticode signature.
resource |
---|
861e76bbe9cedf13f174e795b7580a55_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
lstrlenW
CreateThread
MoveFileA
SetFileAttributesA
ExitProcess
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
Sleep
GetCommandLineW
RemoveDirectoryA
Process32Next
Process32First
CreateDirectoryA
WritePrivateProfileStringA
DeleteFileA
GetSystemDirectoryA
CreateProcessA
WaitForSingleObject
CloseHandle
GetExitCodeProcess
GetCurrentProcessId
LocalFree
LoadLibraryA
FreeLibrary
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
ftell
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
strcpy
_wcslwr
wcsstr
strlen
_purecall
memcpy
memcmp
??3@YAXPAX@Z
strcmp
strrchr
atoi
strchr
memset
sprintf
fclose
fread
??2@YAPAXI@Z
_strlwr
fseek
fopen
strcat
strstr
_access
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ