DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b6757409a5aa4840b7ed9ca0bc84931c_JaffaCakes118.dll
Resource
win7-20240729-en
Target
b6757409a5aa4840b7ed9ca0bc84931c_JaffaCakes118
Size
36KB
MD5
b6757409a5aa4840b7ed9ca0bc84931c
SHA1
832b466057f56816e08caadb1d6ddd45307a950b
SHA256
9cd5578ad3a181260845324f8924dfc288ee7d4e8a8ebab149addbcea8ca3581
SHA512
9c4b0c2f00209c511d323d7002346c519022191252ee4640f8d23591d29fbd94e8ee29541591635a1dd578a331298dc6e79cfa304e9f62b21dc85d6988cee783
SSDEEP
768:SRnMeI2b5QLbsBzaGusuNnZZzaVdFP4ZjnAC0C/Bc:SdvI2b6bypa5Hw54ZjP0CZc
Checks for missing Authenticode signature.
resource |
---|
b6757409a5aa4840b7ed9ca0bc84931c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
ExitProcess
FindNextFileA
FindFirstFileA
GetExitCodeProcess
CloseHandle
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
MoveFileA
DeleteFileA
SetFileAttributesA
DisableThreadLibraryCalls
lstrlenA
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Sleep
GetCommandLineW
Process32Next
Process32First
CreateToolhelp32Snapshot
MultiByteToWideChar
GetCurrentProcessId
EnterCriticalSection
CreateThread
LeaveCriticalSection
LoadLibraryA
FreeLibrary
lstrlenW
WideCharToMultiByte
InitializeCriticalSection
SetWindowTextA
SendMessageA
FindWindowExA
IsWindow
RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegQueryInfoKeyA
RegCreateKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
??2@YAPAXI@Z
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strcmp
_wcslwr
wcsstr
strcpy
strncmp
strchr
strncpy
_purecall
strlen
??3@YAXPAX@Z
memcmp
memcpy
sprintf
strstr
strrchr
strcat
memset
_strupr
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
DnsQuery_A
inet_ntoa
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ