DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b2d5dfdeb6ddfd78ab2a6c325eb03a0a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b2d5dfdeb6ddfd78ab2a6c325eb03a0a_JaffaCakes118
Size
72KB
MD5
b2d5dfdeb6ddfd78ab2a6c325eb03a0a
SHA1
3ad18d05980a2d154535e51ca5e56569b434e5b8
SHA256
425ddb97a37c6ceea86b879ee406a8d5e539a14bc10d6216b997dee841c5da61
SHA512
e889f52b1a9f48933b49fb6d641a309fd8b02afe89b5d18494ecfdb1dc2ff8b310003ada7034d9453d64e2dedb7922e0201d266a1fb165484f8e524ce5e5ff86
SSDEEP
768:5VZIkWKIfphj9iJaSbAJDPeSv/o/Ztaz91WHrG4YrnrviCFhtQivS51gISk:ZQKIfnj9sa9JDPe3Wn3Fhtrq7gIS
Checks for missing Authenticode signature.
resource |
---|
b2d5dfdeb6ddfd78ab2a6c325eb03a0a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Process32Next
Process32First
GetModuleFileNameA
SetFileAttributesA
LocalFree
ExitProcess
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
RemoveDirectoryA
CreateDirectoryA
WideCharToMultiByte
lstrlenW
LoadLibraryA
GetProcAddress
GetCommandLineW
GetCurrentProcessId
lstrlenA
MultiByteToWideChar
WritePrivateProfileStringA
CloseHandle
CreateThread
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
DeleteFileA
MoveFileA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
fclose
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strcmp
_access
strncmp
strncpy
strchr
atoi
_wcslwr
wcsstr
_purecall
??3@YAXPAX@Z
strstr
strrchr
sprintf
strlen
memset
strcat
strcpy
memcmp
memcpy
_strupr
fread
??2@YAPAXI@Z
ftell
fseek
fopen
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ