DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8ca3e9d18cf41d5a9c47da87115f0cae_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8ca3e9d18cf41d5a9c47da87115f0cae_JaffaCakes118
Size
60KB
MD5
8ca3e9d18cf41d5a9c47da87115f0cae
SHA1
3c7adb404babc9be2793181127d33aa91a534202
SHA256
d53637123aab658305c3cb7ef43b81f2a0f03b99abf5059696fe7e5b9014cd73
SHA512
bfdb0d4c5a19ec9cb0cf59049d8a0d13a745c9cedc732378591576eb1a9400310194ddb677a515e99b716826dd8bb527c617eba947ff004ea05382a741616c63
SSDEEP
768:dDHWDZwjeZdUeMEQ/ydkRbhc2aGF4JJ6AlhDrwUHCcaNzcMVRJu6HBvUsk/+dOm:qdAeMEQO0RaKOJRHWzcEvjvUD/+dOm
Checks for missing Authenticode signature.
resource |
---|
8ca3e9d18cf41d5a9c47da87115f0cae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
ExitProcess
WritePrivateProfileStringA
CreateDirectoryA
GetCurrentProcessId
CreateProcessA
RemoveDirectoryA
DeleteFileA
GetProcAddress
CloseHandle
GetCommandLineW
SetFileAttributesA
Process32Next
Process32First
MoveFileA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateThread
LocalFree
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryA
GetSystemDirectoryA
RegQueryValueExA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
strcpy
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
strncmp
strncpy
strrchr
strcmp
??3@YAXPAX@Z
sprintf
strstr
??2@YAPAXI@Z
memcpy
_purecall
memcmp
strlen
_access
strcat
_strlwr
memset
atoi
strchr
wcsstr
_wcslwr
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ