DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d36f75e5950796b7562ff6897817f0d3_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d36f75e5950796b7562ff6897817f0d3_JaffaCakes118
Size
80KB
MD5
d36f75e5950796b7562ff6897817f0d3
SHA1
6922d01262444156b2083f70c1ed8416597d6a44
SHA256
a809077a07defd16674e206432dbab59229723c949db736031534fe09eac3a2a
SHA512
6f0b14913a3a09fdbd9bf22d2b65a33b982bb6c88f0de7e119b7f5a65fe9aed62797bf0d53405b61ae538b7e5377d348c6dbbad351b970bf2d3dcac2f936a6ee
SSDEEP
1536:3DzWYeHmmap8svekHPjnR1pkftKEtdtEzz:mzHGpNHrRIlXdezz
Checks for missing Authenticode signature.
resource |
---|
d36f75e5950796b7562ff6897817f0d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
InterlockedDecrement
HeapDestroy
lstrlenW
lstrlenA
GetShortPathNameA
GetModuleHandleA
WritePrivateProfileStringA
FreeLibrary
LoadLibraryA
WideCharToMultiByte
FindNextFileA
GetPrivateProfileStringA
InterlockedIncrement
CreateDirectoryA
GetProcAddress
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
GetCommandLineW
CreateThread
ExitProcess
Process32Next
Process32First
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
RemoveDirectoryA
MultiByteToWideChar
DeleteFileA
MoveFileA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
Sleep
SetFileAttributesA
LocalFree
FindFirstFileA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
_purecall
_strupr
_strlwr
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
strcmp
atoi
strncmp
strchr
strncpy
fopen
fseek
??3@YAXPAX@Z
memset
sprintf
strlen
strstr
??2@YAPAXI@Z
strcat
strcpy
_access
memcpy
_stricmp
memcmp
strrchr
fclose
fread
ftell
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ