DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bb91aca02467c5910f655939fe9c48c3_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bb91aca02467c5910f655939fe9c48c3_JaffaCakes118
Size
68KB
MD5
bb91aca02467c5910f655939fe9c48c3
SHA1
b37a5f9f3019a25390decb2ac44513750b792365
SHA256
f585c5a713f376c05227c77cff8df413ca407f084fe7081d0f203b2532086648
SHA512
1710b19879ada03dd060480f046b8ccb75639f6735eb19f80e347589bd8f82016be5638c38bd4a9ff790aec46690d569e4f790074a59bd9dcaa3e61781cab003
SSDEEP
1536:QJKkDjZx/M2AdipD/2uO4+zNlFqbgNbf0i:Q1PZmXi1uuO4+xlEbgNp
Checks for missing Authenticode signature.
resource |
---|
bb91aca02467c5910f655939fe9c48c3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
GetExitCodeProcess
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
LocalFree
GetCurrentProcessId
SetFileAttributesA
ExitProcess
Process32Next
Process32First
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
RemoveDirectoryA
MoveFileA
FreeLibrary
LoadLibraryA
GetProcAddress
lstrlenW
WideCharToMultiByte
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
Sleep
WritePrivateProfileStringA
CreateDirectoryA
lstrlenA
MultiByteToWideChar
DeleteFileA
CreateThread
GetCommandLineW
RegQueryValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
CommandLineToArgvW
SHGetSpecialFolderPathA
CoInitialize
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoGetInterfaceAndReleaseStream
SysFreeString
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
fseek
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_purecall
strncmp
strncpy
memcpy
strcpy
memcmp
strcmp
strlen
_wcslwr
wcsstr
strchr
atoi
_access
??3@YAXPAX@Z
fclose
fread
memset
??2@YAPAXI@Z
ftell
_strupr
fopen
strcat
strrchr
sprintf
strstr
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ