DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b20c695fe37f248bc901bfa51200ec1a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b20c695fe37f248bc901bfa51200ec1a_JaffaCakes118
Size
60KB
MD5
b20c695fe37f248bc901bfa51200ec1a
SHA1
5bccc761510c1bb224e365be1d71342816352235
SHA256
4598919f8a5aaba9682894d7f1fd25cd03743e7f56a92167a0459a4bce737b33
SHA512
c079a0d7b87be8d8d488510633fe1ae897ace8a3ab09a69d45be820488819c8bc22d483c533d24221edf92623bf9679733fc1035036e6f1b2814fab6cfaa10c7
SSDEEP
768:d5PZ7tSVwsHo0TODQhOtRVn92B39NLxTE5PTQBUtQ2bqM20/6q8Vt00l+B:T3Go060MI39NLkPc+m10N8VRl+B
Checks for missing Authenticode signature.
resource |
---|
b20c695fe37f248bc901bfa51200ec1a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
LocalFree
CloseHandle
Process32Next
Process32First
GetProcAddress
DeleteFileA
CreateProcessA
RemoveDirectoryA
GetSystemDirectoryA
FindNextFileA
Sleep
FindFirstFileA
GetExitCodeProcess
WaitForSingleObject
GetCurrentProcessId
MoveFileA
SetFileAttributesA
ExitProcess
CreateDirectoryA
GetCommandLineW
WritePrivateProfileStringA
WideCharToMultiByte
LoadLibraryA
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
GetPrivateProfileStringA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
strlen
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
_access
fopen
fseek
ftell
fread
fclose
strncmp
memcpy
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
atoi
strchr
sprintf
strcmp
strrchr
_stricmp
memset
strstr
strcpy
strcat
strncpy
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ