DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
calloc
free
malloc
realloc
Static task
static1
Behavioral task
behavioral1
Sample
bec3d17ec832c8c5633291b9e9f9df72_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bec3d17ec832c8c5633291b9e9f9df72_JaffaCakes118
Size
64KB
MD5
bec3d17ec832c8c5633291b9e9f9df72
SHA1
6e31126ecca77b22e90f5278039f3728bc1c6c6c
SHA256
76da9f18f345131dc425e8e14682b0bd9169c62c47895889b0fc5d51ea858ef1
SHA512
33c9eb3edf0ed936fc037f140c1857a95007d825272ba16a6ad4a14975fb9ff2737b28fc0dded36d733663d6ad207572b3c4321bc6b268035d05d0c4c3a14cd3
SSDEEP
768:uKby85VSxxVuOf9p7onqNTdOCSF8qLU1c7WM06UZiAPOOplxpdK:FJ5V0Df9p7MqZoCe8rW7WMqiAWQlxp4
Checks for missing Authenticode signature.
resource |
---|
bec3d17ec832c8c5633291b9e9f9df72_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTempFileNameA
lstrcmpA
SetFilePointer
ReadFile
GetFileSize
GetSystemTime
SystemTimeToFileTime
SetFileTime
Process32Next
Module32First
TerminateProcess
OpenProcess
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
GetLocaleInfoA
GetVersionExA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
CreateDirectoryA
FindClose
FindNextFileA
WritePrivateProfileStringA
FindFirstFileA
RemoveDirectoryA
CopyFileA
SetFileAttributesA
GetModuleFileNameA
ReleaseMutex
GetLastError
CreateMutexA
LeaveCriticalSection
EnterCriticalSection
GetTickCount
DeleteCriticalSection
CreateThread
InitializeCriticalSection
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
WaitForSingleObject
CreateEventA
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
HeapAlloc
GetSystemInfo
HeapCreate
InterlockedIncrement
InterlockedDecrement
DebugBreak
HeapReAlloc
HeapFree
GetWindowsDirectoryA
lstrcatA
GetSystemDirectoryA
ExpandEnvironmentStringsA
GetTempPathA
DeleteFileA
GlobalAlloc
CreateFileA
WriteFile
CloseHandle
GlobalFree
lstrcpynA
lstrcpyA
GetCurrentProcessId
lstrlenA
GetTopWindow
GetWindow
GetWindowThreadProcessId
IsWindowVisible
RegQueryValueExA
RegCloseKey
RegOpenKeyA
StrStrA
ShellExecuteA
StrRChrA
StrStrIA
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocStringLen
SysFreeString
ord23
ord57
ord18
ord21
ord31
ord15
ord32
ord30
ord58
ord16
_itoa
strchr
strlen
atoi
abs
rand
memcmp
memcpy
time
srand
_ftol
memset
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
calloc
free
malloc
realloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ