DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ac49722d9b0303aa57ea990be5cb3c8d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ac49722d9b0303aa57ea990be5cb3c8d_JaffaCakes118
Size
48KB
MD5
ac49722d9b0303aa57ea990be5cb3c8d
SHA1
8d442d7e88130842d89763e5528fc000d5526524
SHA256
141c308b6c25a2e729db98d924975872e565fbcade9ecd26f100459418aee3d2
SHA512
3541e384a757d6a3b8b00fe90f800cf952ddee5c894fb16d05c0b9c02527e164dd9f4222a1ff1d56821b86bddf0b700c3aa0392bef1ee92f72ba386357fddb4c
SSDEEP
768:QkS9Wz7e6rTVn/LZHZDGhBbLiIsCiHqQpV14JgV25FaoKx+y+ABDIjUBkfS2:QkSM1D3+LsC7414Jgo12+KBiUBkfS
Checks for missing Authenticode signature.
resource |
---|
ac49722d9b0303aa57ea990be5cb3c8d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalFree
FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenA
WideCharToMultiByte
lstrlenW
CreateThread
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
GetSystemDirectoryA
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
WritePrivateProfileStringA
ExitProcess
GetCurrentProcessId
CreateDirectoryA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
Sleep
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
Process32First
Process32Next
CloseHandle
GetCommandLineW
GetModuleFileNameA
EnterCriticalSection
RegOpenKeyExA
RegQueryValueExA
RegQueryInfoKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
memcmp
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
strstr
_wcslwr
wcsstr
strcat
_access
strchr
atoi
??3@YAXPAX@Z
strcmp
strrchr
strcpy
sprintf
strlen
memset
_strlwr
memcpy
_purecall
??2@YAPAXI@Z
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ