DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
da37e5ce83c37577d751c02c5e68752c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
da37e5ce83c37577d751c02c5e68752c_JaffaCakes118
Size
56KB
MD5
da37e5ce83c37577d751c02c5e68752c
SHA1
2b7f3d93110a34e61ac8206ed9527633be2086af
SHA256
d7f3aa730f25579e630ff29925427faec5d6f95278343b2dbe56194fff351db4
SHA512
9380cf92a03ea7f864b9d34b331b6d8d6b711b3a9d0a3f6745d2e5099c3d65f1b46ace455cea2c872e25d4edfb9ad86fc8885dcd95667534932d644ed36b8363
SSDEEP
1536:UwM39vfJufkaGG+z7eUTZA+aSO47qaIu2jsOfn1:/M39JWUNgSOgmjPn
Checks for missing Authenticode signature.
resource |
---|
da37e5ce83c37577d751c02c5e68752c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetModuleFileNameA
ExitProcess
CloseHandle
Process32Next
Process32First
LocalFree
WritePrivateProfileStringA
SetFileAttributesA
FindNextFileA
GetPrivateProfileStringA
GetShortPathNameA
FreeLibrary
GetSystemDirectoryA
WideCharToMultiByte
MoveFileA
GetCommandLineW
CreateDirectoryA
CreateThread
GetExitCodeProcess
WaitForSingleObject
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
lstrlenA
MultiByteToWideChar
Sleep
GetCurrentProcessId
LoadLibraryA
GetProcAddress
DeleteFileA
CreateProcessA
FindFirstFileA
RegQueryValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
strlen
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strcmp
atoi
_access
strrchr
fopen
fseek
ftell
fread
fclose
strcat
strcpy
memset
wcsstr
_wcslwr
??3@YAXPAX@Z
sprintf
strncpy
strchr
strncmp
_strupr
memcpy
_purecall
??2@YAPAXI@Z
memcmp
strstr
SHDeleteKeyA
SHSetValueA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ