DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e128b0d3cae51e899d71327a172efacb_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e128b0d3cae51e899d71327a172efacb_JaffaCakes118
Size
44KB
MD5
e128b0d3cae51e899d71327a172efacb
SHA1
1ecad63e110d81861c1130f77cb245a3cacc5a46
SHA256
2b0db768c9ce47ab0a2b1c0476a55ab5014fe552cf9a7599c57f632f3d000235
SHA512
5729ac2447f223ef2a61026dcdd0f33c587a3259e6015b3f79039906562f394921b176c289e157153b2995c6115a500022af14b8922706cb93768bf6b7e6597e
SSDEEP
768:n2hmOLk9oRurDfcb3AKznW9yqTziwwYhpF7vTZjZ65e7+7er8TkFSgNJ1rsna4Fo:2kQurDfc7AKW/TWchnXbxa7er8+S02ar
Checks for missing Authenticode signature.
resource |
---|
e128b0d3cae51e899d71327a172efacb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
Process32Next
Process32First
GetProcAddress
MoveFileA
GetCommandLineW
Sleep
DisableThreadLibraryCalls
LocalFree
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
CreateDirectoryA
WritePrivateProfileStringA
GetCurrentProcessId
RemoveDirectoryA
ExitProcess
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
FindNextFileA
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
FreeLibrary
WaitForSingleObject
GetExitCodeProcess
CreateThread
GetSystemDirectoryA
GetModuleFileNameA
CloseHandle
CreateProcessA
InitializeCriticalSection
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoUninitialize
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
fseek
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
strcmp
_access
_purecall
strncmp
strncpy
_wcslwr
wcsstr
strchr
atoi
memset
sprintf
??3@YAXPAX@Z
strstr
strrchr
strcat
??2@YAPAXI@Z
fclose
fread
ftell
_stricmp
fopen
memcmp
memcpy
strcpy
strlen
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ