DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e12de9f50d504f6883fd0542babaed52_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e12de9f50d504f6883fd0542babaed52_JaffaCakes118
Size
36KB
MD5
e12de9f50d504f6883fd0542babaed52
SHA1
6a66dc870e00b6707a5c111ad89394486f9464d1
SHA256
d6818587c4fcbfe4721d18ff786a9de9f07277e8e5619608bd956b1e2a23858b
SHA512
cf8352e935def246934fac19c234efaa5d87c33f0bf60ec1ce5b0cf16419e5909b8bd4bec7c90c6d2d24a956c3621b28e8694fa73071b4b07e0839f2675bfe00
SSDEEP
768:/DNKZyo2jlLZPzphNcJUTO7jwy2U8e7lMB:/DNmy/ZZFcoO7jw5/oq
Checks for missing Authenticode signature.
resource |
---|
e12de9f50d504f6883fd0542babaed52_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
CloseHandle
WideCharToMultiByte
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
Sleep
MoveFileA
DeleteFileA
SetFileAttributesA
CreateThread
ExitProcess
LoadLibraryA
FreeLibrary
FindFirstFileA
FindNextFileA
GetModuleFileNameA
GetModuleHandleA
GetCommandLineW
FindWindowExA
IsWindow
SetWindowTextA
SendMessageA
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoInitialize
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
_strlwr
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
memcmp
_purecall
memcpy
strcpy
strcat
strrchr
strlen
memset
_wcslwr
wcsstr
strstr
??3@YAXPAX@Z
sprintf
??2@YAPAXI@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ