DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c9321680f3f828926423b35bca9d248c_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c9321680f3f828926423b35bca9d248c_JaffaCakes118
Size
52KB
MD5
c9321680f3f828926423b35bca9d248c
SHA1
049b56b5a25ff005e4bc823ff29c03ccef9dad13
SHA256
15b49378cb1bf93f88a91499ab4c14c80a33dbb68b481e9765121b0e06408ac0
SHA512
7999771e802db34859ff56c8529556250df917d4f2395caf6a94b9b6ad8f5e9b31eb71946183650b6a78d48c48ac07ef22318d6b395bd367fc92c273393c9b87
SSDEEP
768:JLNatq9lNNYHHZE/6Js4bNLuOtyp77nYV1rgS30OC0QfXGUpFs4MY2PP3MQysc:dPwsbquqypU15zdUWP4M70/
Checks for missing Authenticode signature.
resource |
---|
c9321680f3f828926423b35bca9d248c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
DeleteFileA
MultiByteToWideChar
lstrlenA
ExitProcess
Process32Next
Process32First
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
LoadLibraryA
HeapDestroy
GetShortPathNameA
GetModuleHandleA
RemoveDirectoryA
Sleep
MoveFileA
SetFileAttributesA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
CreateDirectoryA
GetCurrentProcessId
FreeLibrary
LocalFree
CreateThread
lstrlenW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryA
CreateProcessA
WaitForSingleObject
CloseHandle
GetExitCodeProcess
GetModuleFileNameA
GetCommandLineW
WritePrivateProfileStringA
InterlockedDecrement
SetEntriesInAclA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
GetNamedSecurityInfoA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
??2@YAPAXI@Z
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
atoi
strstr
strncmp
strchr
strncpy
_access
_purecall
_wcslwr
wcsstr
sprintf
strcmp
strrchr
memset
??3@YAXPAX@Z
strlen
strcat
strcpy
fclose
fread
_stricmp
ftell
fseek
fopen
memcmp
memcpy
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ