DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bccf559a517f1db686e2092b60d311cf_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bccf559a517f1db686e2092b60d311cf_JaffaCakes118
Size
52KB
MD5
bccf559a517f1db686e2092b60d311cf
SHA1
7f85da71d3c57cd37281e5c948ab5ef05066006b
SHA256
7334bc0f00d93e494918b1e276fdf88c3406985662f297b6ca3fae0ffb81937b
SHA512
f273f6f45ee6e60c2146fbce15b82d5f7702b4347e459ecf962ecb70fd608a6f8bd62f33b9c6aced346521273b5f6aa57f946fb4cfb7f37ca275480ec9516df2
SSDEEP
1536:3ISC+wzbWYc1VOZ/BVFo66lVfd7VAFEGCW5X7Ug6c6:YSC+2qJCFC+Ug6
Checks for missing Authenticode signature.
resource |
---|
bccf559a517f1db686e2092b60d311cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
ExitProcess
CreateDirectoryA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
FindNextFileA
DeleteFileA
GetPrivateProfileStringA
FindFirstFileA
lstrlenA
MoveFileA
SetFileAttributesA
RemoveDirectoryA
Sleep
LocalFree
WideCharToMultiByte
GetCurrentProcessId
GetCommandLineW
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetProcAddress
CreateThread
Process32First
Process32Next
CloseHandle
FreeLibrary
LoadLibraryA
WritePrivateProfileStringA
SetNamedSecurityInfoA
SetEntriesInAclA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
??2@YAPAXI@Z
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
strchr
atoi
strcmp
fopen
fseek
ftell
fread
wcsstr
_wcslwr
strcpy
??3@YAXPAX@Z
strlen
memset
strcat
sprintf
memcpy
_purecall
_strlwr
memcmp
_access
strstr
strrchr
fclose
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ