DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a7cfb644ba9820840d9db1bf7f860e3d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a7cfb644ba9820840d9db1bf7f860e3d_JaffaCakes118
Size
36KB
MD5
a7cfb644ba9820840d9db1bf7f860e3d
SHA1
64e7b647ed69c9b07534d3459edc6ed2acaf09d5
SHA256
54140863b50cc2d215c0e50a76fa58f93cb414c74f1dba459e5414d5b8c1cfe3
SHA512
fc03dbf516425802b3b0dcef8ae72f317947f6fd5393c97d149e09f01ee49e05917e3af0f04700f1e2c287a57f995f22facb4095d668cceb247a5f039bbf0d5f
SSDEEP
768:tEimdMhYUEXiJVQNDx+snZWeuVWegr0MZ72q:tEiThYVXi3QrJIVWegAwSq
Checks for missing Authenticode signature.
resource |
---|
a7cfb644ba9820840d9db1bf7f860e3d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
CloseHandle
CreateProcessA
GetSystemDirectoryA
CreateThread
MoveFileA
DeleteFileA
SetFileAttributesA
Process32Next
Process32First
CreateToolhelp32Snapshot
FindNextFileA
FindFirstFileA
ExitProcess
lstrlenW
GetExitCodeProcess
WaitForSingleObject
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
Sleep
GetCommandLineW
FreeLibrary
GetCurrentProcessId
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
LoadLibraryA
SetWindowTextA
SendMessageA
FindWindowExA
IsWindow
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoInitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
strncmp
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
_purecall
strcat
memcpy
memcmp
??2@YAPAXI@Z
strstr
strcpy
strlen
??3@YAXPAX@Z
strcmp
strrchr
wcsstr
_wcslwr
sprintf
strncpy
strchr
memset
_strlwr
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
DnsQuery_A
inet_ntoa
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ