DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dd7f0dd13dc586a41263ba384201c83b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dd7f0dd13dc586a41263ba384201c83b_JaffaCakes118
Size
52KB
MD5
dd7f0dd13dc586a41263ba384201c83b
SHA1
df126239c49e3b4ee5249a5835650f7802b71435
SHA256
92afe55aba7fafe669f40ec31f339d0832d88947ef0b5d4c80789818fe48d741
SHA512
b11f2a43284038897dee86a28880a1fece5963c8044a3c69380b877f8c28090f62c5af03b3da560dbd9f488dad931614353260ecd662b5d3c7acbf2434c88ad3
SSDEEP
768:MsLqLyIzUUWieLCSiKvS4drDAj3k50QWTjZO3YNjEMvcYkezH3k66K8tKeaSvKKe:MAIB2LCSiKLrenOyhvEezH3kLTaCKK
Checks for missing Authenticode signature.
resource |
---|
dd7f0dd13dc586a41263ba384201c83b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
CreateProcessA
GetSystemDirectoryA
ExitProcess
CreateThread
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
CloseHandle
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetCurrentProcessId
CreateDirectoryA
Process32Next
Process32First
GetCommandLineW
GetExitCodeProcess
WaitForSingleObject
WritePrivateProfileStringA
MoveFileA
LocalFree
SetFileAttributesA
FindFirstFileA
GetPrivateProfileStringA
DeleteFileA
FindNextFileA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
Sleep
FreeLibrary
LoadLibraryA
InterlockedDecrement
ControlService
OpenServiceA
DeleteService
CloseServiceHandle
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
OpenSCManagerA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
strrchr
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strcmp
_access
fopen
fseek
ftell
fread
fclose
_purecall
atoi
??3@YAXPAX@Z
sprintf
strncpy
strchr
memset
strncmp
strlen
strcpy
strstr
_strupr
strcat
??2@YAPAXI@Z
wcsstr
_wcslwr
memcmp
memcpy
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ