DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ddad805927046cab59c5b35e80fa2b0b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ddad805927046cab59c5b35e80fa2b0b_JaffaCakes118
Size
52KB
MD5
ddad805927046cab59c5b35e80fa2b0b
SHA1
1d9ce0c829ce19c3998f8e63cf4d2e69732410e4
SHA256
3fd1adbfced174545e37b1bbd10833d0d080f8ecc089ec824ef803baf83793fc
SHA512
70c5a8fc769cc20803001d90de9b240a219038a03c2c40510784058428436770dcc06fad5057807107ca9d345f242de91866c670114d67ab4e1f585a9b928d18
SSDEEP
1536:v5uLN5aOZtGn50V9nF/S76y7lISm/RI27NGy587MP:xuLN57ZW0VT26y7lQxf8g
Checks for missing Authenticode signature.
resource |
---|
ddad805927046cab59c5b35e80fa2b0b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
ExitProcess
Process32Next
Process32First
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
lstrlenW
LoadLibraryA
GetShortPathNameA
GetModuleHandleA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
GetProcAddress
WideCharToMultiByte
CreateDirectoryA
RemoveDirectoryA
GetCommandLineW
FreeLibrary
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
CreateThread
GetCurrentProcessId
WritePrivateProfileStringA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
WaitForSingleObject
CloseHandle
GetExitCodeProcess
LocalFree
lstrlenA
RegCreateKeyExA
RegSetValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
strncmp
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
strcmp
atoi
_access
fopen
fseek
ftell
fread
fclose
strrchr
??3@YAXPAX@Z
sprintf
memset
strstr
??2@YAPAXI@Z
wcsstr
_wcslwr
strlen
strncpy
strchr
_strlwr
strcpy
memcpy
_purecall
memcmp
strcat
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ