DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b43f7495eb09f9da618df6334766a189_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b43f7495eb09f9da618df6334766a189_JaffaCakes118
Size
64KB
MD5
b43f7495eb09f9da618df6334766a189
SHA1
3ad92b95a56c997d332466cc4959fa41b3571d64
SHA256
10c188ad498720827272e87287810186c645405f4bd9ba484ce17390218d8e3c
SHA512
9701079455e897bdfc7fdf1589486fec9b3169a6ba32e1d36c0a9f12bbbe2eb92146976a81f835a677792d9964acf983b4f102e8e23c19f633779600059e13d2
SSDEEP
768:U185ZF/zZVRCx8if/+om3moO8luyb5wsPy1oUvHJB5tSeWvYttrwuMDfSpt:euZ99yf/7rD8luyVwg3UvHdtSd2ZMSt
Checks for missing Authenticode signature.
resource |
---|
b43f7495eb09f9da618df6334766a189_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
CloseHandle
GetProcAddress
CreateProcessA
GetSystemDirectoryA
GetCurrentProcessId
Process32Next
Process32First
RemoveDirectoryA
MoveFileA
lstrlenA
WideCharToMultiByte
WritePrivateProfileStringA
GetExitCodeProcess
WaitForSingleObject
CreateDirectoryA
Sleep
GetCommandLineW
LocalFree
CreateThread
ExitProcess
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
FindNextFileA
FreeLibrary
LoadLibraryA
SetNamedSecurityInfoA
GetNamedSecurityInfoA
RegDeleteKeyA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
strlen
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
strcmp
fopen
fseek
ftell
fread
fclose
strchr
strstr
memset
strrchr
sprintf
strcat
memcpy
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
_stricmp
strcpy
wcsstr
_wcslwr
_access
atoi
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ