DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
94fa4f0a97405405c7450a83a2d84829_JaffaCakes118.dll
Resource
win7-20240708-en
Target
94fa4f0a97405405c7450a83a2d84829_JaffaCakes118
Size
60KB
MD5
94fa4f0a97405405c7450a83a2d84829
SHA1
262dbe73f13769ba82e2c95ed74107aaa1600891
SHA256
c01e146b4a1e0b9b9d80b530dd83996a8ff34325057c1255e6529d2b13881145
SHA512
8d1f52162aa6786e04a506cda5c3679850c86f6a1fb73199720cfa2061f97fedec1137b4bf448b595a6def30adae16620d0909391dc12684c19ce08af60723af
SSDEEP
768:hDV2M1YZjM8kFBTDrx8j/HZhqbH+muadX0xAAbe0oSdijti2sHClVon/6:hDV2WAM+AeMFChut9silVgi
Checks for missing Authenticode signature.
resource |
---|
94fa4f0a97405405c7450a83a2d84829_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
MoveFileA
LeaveCriticalSection
EnterCriticalSection
LocalFree
RemoveDirectoryA
Process32Next
Process32First
CreateThread
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetCommandLineW
CreateDirectoryA
WritePrivateProfileStringA
GetCurrentProcessId
Sleep
GetExitCodeProcess
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
FindNextFileA
ExitProcess
GetModuleFileNameA
DisableThreadLibraryCalls
SetNamedSecurityInfoA
GetNamedSecurityInfoA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
_wcslwr
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
strncmp
strncpy
strchr
atoi
strcmp
strrchr
memset
strlen
sprintf
strstr
strcat
memcmp
??3@YAXPAX@Z
wcsstr
_stricmp
??2@YAPAXI@Z
strcpy
_access
memcpy
_purecall
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ