DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bcc2e4a24da406d8ac1c87dcebbfa3eb_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bcc2e4a24da406d8ac1c87dcebbfa3eb_JaffaCakes118
Size
60KB
MD5
bcc2e4a24da406d8ac1c87dcebbfa3eb
SHA1
8cdc18d496a6980a874d297a081c2089c1f2976d
SHA256
162656355c79f7e81c2a3ee577bc3012dc6b1bf64897d8020593da22cbb79515
SHA512
ccce9388895ccdbbe09d397e199f33d37279087144686a18054749861f957c5c08760f2a007cc10ed05968a37d498b8940314bab97fc33f159e9705dea287711
SSDEEP
768:+0IwrZhqNYFAh/LJytvJhiUP7eLzkRyfBJ3bK7fP0dzWelkcm3wrIY58p2:Ly5/LJExHP7e7DbuwzWeOTwrIAN
Checks for missing Authenticode signature.
resource |
---|
bcc2e4a24da406d8ac1c87dcebbfa3eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
MoveFileA
SetFileAttributesA
CloseHandle
CreateProcessA
GetSystemDirectoryA
WritePrivateProfileStringA
Sleep
GetCommandLineW
LocalFree
MultiByteToWideChar
CreateThread
GetExitCodeProcess
WaitForSingleObject
ExitProcess
GetCurrentProcessId
Process32Next
Process32First
CreateDirectoryA
RemoveDirectoryA
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
lstrlenW
WideCharToMultiByte
FreeLibrary
LoadLibraryA
GetProcAddress
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
DeleteFileA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
_wcslwr
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
_access
fopen
fseek
ftell
fread
fclose
strcat
strcpy
strncmp
strstr
strrchr
sprintf
??3@YAXPAX@Z
strlen
memcpy
_purecall
??2@YAPAXI@Z
memcmp
wcsstr
_strupr
atoi
strchr
memset
strcmp
strncpy
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ