DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8ef27a3b981cac96dc46ecc572e45d93_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8ef27a3b981cac96dc46ecc572e45d93_JaffaCakes118
Size
68KB
MD5
8ef27a3b981cac96dc46ecc572e45d93
SHA1
0acd4798f4f62cadf521f8a08b2b502309d69a92
SHA256
c0745cc4ead2523a000f7799abf0da5feb16ba7008f8b38cc5b7935a406fd565
SHA512
dbd9df74ec68e2268955b3acd970f5e5b78eee046f5cabf055d0aaf858ce13f9cca37b9ea25391ea918cfc087bd99c032768daf45a53d07d8ecd7fb1779a0ffb
SSDEEP
1536:26PqbGhK7WFgddgOt8XF/olfsQh2eRDqt7TE:uGhWgHSRhVRDG7TE
Checks for missing Authenticode signature.
resource |
---|
8ef27a3b981cac96dc46ecc572e45d93_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
DeleteFileA
GetModuleFileNameA
DisableThreadLibraryCalls
CreateThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
CopyFileA
lstrlenA
GetShortPathNameA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetTempFileNameA
GetTempPathA
GetLocalTime
MultiByteToWideChar
LocalFree
GetLastError
WideCharToMultiByte
lstrlenW
HeapDestroy
lstrcpyA
GetMessageA
MessageBoxA
CharNextA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
ShellExecuteA
CoCreateInstance
SafeArrayCreateVector
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SafeArrayAccessData
SafeArrayDestroy
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
URLDownloadToFileA
_stricmp
??1type_info@@UAE@XZ
_onexit
__dllonexit
_adjust_fdiv
_initterm
_CxxThrowException
wcslen
fseek
ftell
rewind
fread
_itoa
realloc
memcmp
memcpy
_purecall
fopen
fgets
abs
??3@YAXPAX@Z
strstr
memset
strlen
??2@YAPAXI@Z
strcat
strcpy
strcmp
free
malloc
fclose
strncpy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ