DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c0053f10467fd6d66d7268b714e3a7e1_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c0053f10467fd6d66d7268b714e3a7e1_JaffaCakes118
Size
68KB
MD5
c0053f10467fd6d66d7268b714e3a7e1
SHA1
f7deed2ed217b58974352f969f20d88c1bbcccb5
SHA256
c1967f953fcb5b1d3a345a8e17238883090d173fe43ba95c5cb3d0a1f72b9f64
SHA512
4a865a244e936dd778902cb64a9b3cae56f7bf69fe7007acf2080eb6e08ac1c6cf2053f9a518a04e31bd57200510200fc0b535fe8f8d0b27270d9481c964362e
SSDEEP
1536:lhAf55UewDz/xiCWsI+7SyRnrsRRxyTLmCGFpBToy/:GLmDz/UyRnQCcMy
Checks for missing Authenticode signature.
resource |
---|
c0053f10467fd6d66d7268b714e3a7e1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
Sleep
FreeLibrary
MoveFileA
MultiByteToWideChar
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
WideCharToMultiByte
GetShortPathNameA
GetModuleHandleA
CreateThread
WritePrivateProfileStringA
ExitProcess
RemoveDirectoryA
GetCurrentProcessId
CreateDirectoryA
GetCommandLineW
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
Process32First
Process32Next
CloseHandle
FindFirstFileA
GetPrivateProfileStringA
DeleteFileA
FindNextFileA
GetModuleFileNameA
LocalFree
SetFileAttributesA
lstrlenA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
??3@YAXPAX@Z
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
_access
memcmp
_purecall
memcpy
strchr
atoi
fopen
wcsstr
_wcslwr
strcmp
strrchr
strstr
memset
sprintf
strcat
strlen
strcpy
_stricmp
fclose
fread
??2@YAPAXI@Z
ftell
fseek
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ