DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
88ff3c7e8565cf7e526c51864f574d88_JaffaCakes118.dll
Resource
win7-20240708-en
Target
88ff3c7e8565cf7e526c51864f574d88_JaffaCakes118
Size
68KB
MD5
88ff3c7e8565cf7e526c51864f574d88
SHA1
f64fb999b9fa75100696a95fb9ea813b8c60f715
SHA256
55b1069bf34a5ea69d7f78e67b860d46143868117972e420ade75de54572de03
SHA512
6e1a3a26302d32914ccf4c3e0cf3f5fd7b7b6fc909a1ee8cafa771ccc00adaa42fa0b0e45316cd1ce893dce909c3b1a767fa359355dbbfdaf77a288fa68c2433
SSDEEP
1536:4fKlH/g2tWBkG8Xmmpgue8xmxO/dP3vm:4fUGku8P3vm
Checks for missing Authenticode signature.
resource |
---|
88ff3c7e8565cf7e526c51864f574d88_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WritePrivateProfileStringA
GetExitCodeProcess
CloseHandle
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
WideCharToMultiByte
ExitProcess
RemoveDirectoryA
DeleteFileA
Sleep
FreeLibrary
GetCommandLineW
CreateDirectoryA
SetFileAttributesA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
MoveFileA
Process32Next
Process32First
CreateThread
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
LocalFree
SetEntriesInAclA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
GetNamedSecurityInfoA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
strcpy
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
strcmp
strrchr
_wcslwr
wcsstr
??3@YAXPAX@Z
memcpy
_purecall
??2@YAPAXI@Z
memcmp
sprintf
strstr
memset
strlen
strcat
_strupr
atoi
strchr
_access
strncpy
strncmp
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ