DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
df1331552ab8d667dcf19c3b3236180d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
df1331552ab8d667dcf19c3b3236180d_JaffaCakes118
Size
36KB
MD5
df1331552ab8d667dcf19c3b3236180d
SHA1
b72b1811f1bffa8878e7654fcbad186b192e8e5f
SHA256
e85163891c6a42ff2fa03c21484ad4586aca20936ad05870a810870ec7336fa2
SHA512
986efc50e041aa1f1413edde7d43a94ba112037536519978be2c738cb517142285c9de9c56b11641fa67b03bde47b23b39c19832d5bf42ac7198f1b397d943b8
SSDEEP
768:gYus7aqsG98dIeqZEjkKqI4H+vZXd9BlVaaHPuIk/:gHsHvfGk44HQRbhaa2Iu
Checks for missing Authenticode signature.
resource |
---|
df1331552ab8d667dcf19c3b3236180d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetCommandLineW
MoveFileA
DeleteFileA
SetFileAttributesA
MultiByteToWideChar
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
ExitProcess
lstrlenA
CloseHandle
FreeLibrary
Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
FindFirstFileA
FindNextFileA
lstrlenW
WideCharToMultiByte
GetCurrentProcessId
CreateThread
SetWindowTextA
FindWindowExA
SendMessageA
IsWindow
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoCreateInstance
CoInitialize
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
_strlwr
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
_purecall
??2@YAPAXI@Z
strcpy
memcpy
strstr
memcmp
memset
strcat
strrchr
strlen
??3@YAXPAX@Z
sprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ