DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
daf2c8b27defe1510547b5146e73327e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
daf2c8b27defe1510547b5146e73327e_JaffaCakes118
Size
52KB
MD5
daf2c8b27defe1510547b5146e73327e
SHA1
61ea86bb0e87bf5d3c153bbe723bac38cbd7e06d
SHA256
495628eda3a414b87d48a4d849b7d62e09d8182ff3ebf4af19c2776d93eb308a
SHA512
81f84f6702e95e5efab5a7f6beb2d73e00a8477ab3c897445760a93b84f52128edefd8d57bf207fd0424e0bdb5caf8c32671a322c64ac7990cbd45db07700669
SSDEEP
768:mz3ZDoIx9iCsNcZ3puw/9K/g0jj0y1QFbkfMif6hz/vnnRxbHnXUmsTsWi6:mTmRlNY8wl6DSFbCTy/vnRZnEmsAR6
Checks for missing Authenticode signature.
resource |
---|
daf2c8b27defe1510547b5146e73327e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetFileAttributesA
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
CreateDirectoryA
WritePrivateProfileStringA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
GetExitCodeProcess
DeleteFileA
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
GetCurrentProcessId
Process32Next
Process32First
CreateThread
GetCommandLineW
LocalFree
MoveFileA
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
DisableThreadLibraryCalls
CloseHandle
SetNamedSecurityInfoA
SetEntriesInAclA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
strcat
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
fopen
fseek
ftell
fread
fclose
strcmp
strchr
??3@YAXPAX@Z
strstr
memcpy
_purecall
??2@YAPAXI@Z
memcmp
sprintf
strlen
_access
_strupr
wcsstr
_wcslwr
strrchr
memset
strcpy
atoi
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ