DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a1e547fbf141dfb7102ce4bd93effb31_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a1e547fbf141dfb7102ce4bd93effb31_JaffaCakes118
Size
60KB
MD5
a1e547fbf141dfb7102ce4bd93effb31
SHA1
2d61eaf7cb4711b5609494ff9d2944c0ee963ec5
SHA256
1cb4c713f9be172f6d0c80b1f59aa6bb2d2ac01a6567a632bd0a9629158b58a5
SHA512
d8d964560157b344d6153e5fdcab1b893fc30b894fdfa4a79b2ce3694b7a0b09a85194544541817dda275421f8013560ac87dd7802e54c70fd19a4c9b25f6a36
SSDEEP
768:zbhT1TamyP5RmZeXN6zEQOLhXZukO5h807juhadBkdRaP7wJmUyTkaDUDOSXtS9R:zbZV5yPr5d6WpMvTq+PGUQMUNsfUw
Checks for missing Authenticode signature.
resource |
---|
a1e547fbf141dfb7102ce4bd93effb31_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
WritePrivateProfileStringA
GetProcAddress
DisableThreadLibraryCalls
LocalFree
CreateDirectoryA
GetExitCodeProcess
WaitForSingleObject
CreateThread
ExitProcess
MoveFileA
GetCurrentProcessId
lstrlenW
WideCharToMultiByte
LoadLibraryA
FreeLibrary
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
Sleep
DeleteFileA
GetSystemDirectoryA
CreateProcessA
GetModuleFileNameA
GetCommandLineW
Process32First
Process32Next
CloseHandle
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
BuildExplicitAccessWithNameA
SetEntriesInAclA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
??2@YAPAXI@Z
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
atoi
strncmp
strchr
strncpy
_access
_wcslwr
wcsstr
memcmp
_purecall
strcpy
memset
strlen
sprintf
strcat
strcmp
strrchr
??3@YAXPAX@Z
fclose
fread
_strlwr
ftell
fseek
fopen
strstr
memcpy
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ