DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
cf109788727b6106ac89db6c01c115a4_JaffaCakes118.dll
Resource
win7-20240708-en
Target
cf109788727b6106ac89db6c01c115a4_JaffaCakes118
Size
80KB
MD5
cf109788727b6106ac89db6c01c115a4
SHA1
0ef2d38b5715b6eba34ee5a618cb393ca54e502d
SHA256
41062b7a92910e9dd5806c87aac948e919a109bd872b18ec2af6a4544d0bccd9
SHA512
992a296709cbef9764939048cc4bccb877d22fd7db7728f04415212fa019e6e85b75decd9e66e0dd2a8e8228bb63080da8f2265f83b14c303ae5378403c19722
SSDEEP
768:iX6f34MDosvZdCKRIlH0wRULOY2nJN6mKeNfTA/XtXMAPdQQ1q72F0iBQ6c+:iM4qVWTLSLOYCSmKufcft8kn1nF1BQ8
Checks for missing Authenticode signature.
resource |
---|
cf109788727b6106ac89db6c01c115a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
FreeLibrary
LocalFree
WritePrivateProfileStringA
MoveFileA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
Sleep
GetCommandLineW
GetCurrentProcessId
ExitProcess
RemoveDirectoryA
CreateDirectoryA
Process32First
Process32Next
WaitForSingleObject
GetExitCodeProcess
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
CreateProcessA
CloseHandle
CreateThread
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
SetFileAttributesA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegEnumKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
fclose
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
strcmp
strchr
atoi
_access
strstr
_purecall
strrchr
memcmp
memcpy
??3@YAXPAX@Z
memset
sprintf
strcpy
wcsstr
_wcslwr
strlen
strcat
_strupr
fread
??2@YAPAXI@Z
ftell
fseek
fopen
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ