DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ded3f2968e4a4de38bd37c6b9342bd92_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ded3f2968e4a4de38bd37c6b9342bd92_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ded3f2968e4a4de38bd37c6b9342bd92_JaffaCakes118
Size
52KB
MD5
ded3f2968e4a4de38bd37c6b9342bd92
SHA1
0c904d00490a1d76fe61e9cfa26472c9782eac04
SHA256
408f8356dde3c272e930aa6c583338c8becf467820aa20f1db0664f1a607bd12
SHA512
55245762a98292489997d06f30d48ab0b54e5925c977240e3261403b44bd4f7893587325dd4891fa36984d06bb5fd3b07b32ab0ab046f03f22ebc2e5cd8af9ee
SSDEEP
1536:K6B8aynLjsFyqR2oSQtqNB1YYfLjp1rEkoWs:Ji5nLoFjhTqSY/7oW
Checks for missing Authenticode signature.
resource |
---|
ded3f2968e4a4de38bd37c6b9342bd92_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
WritePrivateProfileStringA
MoveFileA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetExitCodeProcess
WaitForSingleObject
GetCurrentProcessId
CreateThread
FreeLibrary
ExitProcess
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
GetCommandLineW
lstrlenW
SetFileAttributesA
LocalFree
CreateDirectoryA
LoadLibraryA
GetProcAddress
RemoveDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
Sleep
DeleteFileA
Process32First
Process32Next
CloseHandle
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
fseek
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
atoi
strcmp
strncmp
strchr
strncpy
_wcslwr
wcsstr
_purecall
memcpy
??3@YAXPAX@Z
strlen
memset
strcat
strcpy
sprintf
fclose
fread
??2@YAPAXI@Z
ftell
_strupr
fopen
strrchr
strstr
_access
memcmp
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ