DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
cec7abf6354ddd1c4e66d1fedda4500d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cec7abf6354ddd1c4e66d1fedda4500d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cec7abf6354ddd1c4e66d1fedda4500d_JaffaCakes118
Size
52KB
MD5
cec7abf6354ddd1c4e66d1fedda4500d
SHA1
68d32799e4c124b1922b64021dc277d7a08998af
SHA256
ea81a62ae054e1b1d2d7c111f3c9ced80096ed270a1723416882542681a64cae
SHA512
bb402a835c3b89da5513c5b74807fecbaed14f9ee79d7f240b74cb05c64ec8ae28cf06e49da589537ea08670f2cb69c142fc9273280444d8290575eaf961b83f
SSDEEP
768:Cdmtc3EN8nGXONO3OlbpGo74ZHuza/YIjjHh85K89WjZ8f7N7HEzDkKoLdWAz:Cdmc3E6GeNvltSHEa/58o8m0FkLog
Checks for missing Authenticode signature.
resource |
---|
cec7abf6354ddd1c4e66d1fedda4500d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetPrivateProfileStringA
FindFirstFileA
ExitProcess
MoveFileA
LocalFree
Sleep
WritePrivateProfileStringA
GetExitCodeProcess
WaitForSingleObject
CreateThread
RemoveDirectoryA
SetFileAttributesA
Process32Next
Process32First
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetCurrentProcessId
GetCommandLineW
FindNextFileA
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryA
CreateProcessA
CloseHandle
DeleteFileA
lstrlenW
WideCharToMultiByte
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenA
GetModuleFileNameA
MultiByteToWideChar
CreateDirectoryA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysFreeString
SysAllocString
VariantClear
fseek
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
_purecall
memcpy
atoi
_access
strcpy
strncmp
strchr
strncpy
_wcslwr
strcmp
strrchr
??3@YAXPAX@Z
strstr
memcmp
fclose
fread
memset
??2@YAPAXI@Z
ftell
_stricmp
fopen
strcat
sprintf
strlen
wcsstr
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ