DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d9dafc63ff7f6990465a9f57228a2b6a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d9dafc63ff7f6990465a9f57228a2b6a_JaffaCakes118
Size
72KB
MD5
d9dafc63ff7f6990465a9f57228a2b6a
SHA1
14002166d8562ef0266d2975ccaf6f25cf2bb23d
SHA256
4929f03c777d71d7b8854e43fec61f5a26e62b370e7b84139a9ff5a58f9bfcd6
SHA512
28ddc85c39515b0b400f87fcf96dc7e233d77128738e29a6ebaea3dbb3a33208e368556323ad6e9863dc967bdfb31be7046dbc2665a54c212b98543e0c6d1f73
SSDEEP
768:WBtB1do6hsg76f4sURjjGRG+bEi1TZ3jWk9tObHfB37zKEU3qZzDrLoEmUSr5oxX:8tfdlnjjGRGohdCxrzlrZ/rL1yoxdfR
Checks for missing Authenticode signature.
resource |
---|
d9dafc63ff7f6990465a9f57228a2b6a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindNextFileA
DeleteFileA
GetPrivateProfileStringA
FindFirstFileA
GetCommandLineW
MoveFileA
SetFileAttributesA
WritePrivateProfileStringA
Sleep
CreateDirectoryA
Process32Next
Process32First
DisableThreadLibraryCalls
GetCurrentProcessId
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
LocalFree
CreateThread
ExitProcess
RemoveDirectoryA
GetSystemDirectoryA
CreateProcessA
WaitForSingleObject
CloseHandle
GetExitCodeProcess
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strcpy
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_wcslwr
wcsstr
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
memcmp
memset
sprintf
strstr
strrchr
atoi
strchr
strlen
strcat
_strupr
strncpy
strncmp
strcmp
_access
memcpy
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ