DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d32238884d93b01542cdb2809f7dac81_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d32238884d93b01542cdb2809f7dac81_JaffaCakes118
Size
36KB
MD5
d32238884d93b01542cdb2809f7dac81
SHA1
969ef4ed6bfb5fd162a9d53654af256b5b28f440
SHA256
2d753334b7a92b27e4edaa2dd8b854248e1dbfae79163b6592c83d7098dce68c
SHA512
fed2a7651f46a1fca6b02fa9a949e54fb603ef955de5cdece798ca9de9a42b5728d4fe60b4de6a44e13318ab497f22dbd8075fea7a10ec5bc7ee30ec2bbf68fe
SSDEEP
768:pPs80GZeqzn5Z3GV9EOqHIaaLZBOHldDZxEAPpUir+qvq:l195Z3G8OAI8ldNxEAqid
Checks for missing Authenticode signature.
resource |
---|
d32238884d93b01542cdb2809f7dac81_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
GetCommandLineW
CloseHandle
CreateProcessA
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
Sleep
DeleteFileA
Process32First
CreateToolhelp32Snapshot
LeaveCriticalSection
EnterCriticalSection
FindNextFileA
FindFirstFileA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
CreateThread
SetFileAttributesA
MoveFileA
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
Process32Next
SetWindowTextA
SendMessageA
FindWindowExA
IsWindow
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strncmp
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
_purecall
_wcslwr
wcsstr
strcat
strrchr
strcmp
??2@YAPAXI@Z
strcpy
strstr
memcmp
memcpy
??3@YAXPAX@Z
sprintf
strlen
strncpy
strchr
memset
_strupr
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
DnsQuery_A
inet_ntoa
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ