DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e0e9811745a9797ad8ad5d8d9867f8ca_JaffaCakes118.dll
Resource
win7-20240708-en
Target
e0e9811745a9797ad8ad5d8d9867f8ca_JaffaCakes118
Size
76KB
MD5
e0e9811745a9797ad8ad5d8d9867f8ca
SHA1
5823207830bdd80d2a204d86321f516501edeff3
SHA256
43287071c11f04f07bd97cceb883115354ae1008c1aacb023c6afc28ec1c0528
SHA512
b3eb87c96298b8ba4f17ce4289842b014ce3ddb44f11b7ceacef92dc58acd8f11a68df29e96a5dd7f2a97665fdcedd820e78ef6dc22154ba9b473877ac9bdb17
SSDEEP
768:F+GZfZ/Pxahu6rZ4a0ZclDa9QwgqVwmZe/z7n7KIFXYIdhoGTi5pTa:ACZ/PghHhOgqVU/HnOQ7TTg8
Checks for missing Authenticode signature.
resource |
---|
e0e9811745a9797ad8ad5d8d9867f8ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedDecrement
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
LocalFree
SetFileAttributesA
MoveFileA
FindNextFileA
EnterCriticalSection
FindFirstFileA
CreateThread
ExitProcess
WritePrivateProfileStringA
GetCommandLineW
GetSystemDirectoryA
GetExitCodeProcess
WaitForSingleObject
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
FreeLibrary
Process32First
Process32Next
CloseHandle
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
CreateProcessA
Sleep
LoadLibraryA
GetCurrentProcessId
GetProcAddress
GetPrivateProfileStringA
BuildExplicitAccessWithNameA
RegQueryValueExA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
memcpy
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
_wcslwr
wcsstr
strcmp
strrchr
fopen
fseek
ftell
sprintf
??3@YAXPAX@Z
atoi
strchr
strcat
strcpy
memset
_access
strstr
??2@YAPAXI@Z
_strlwr
_purecall
memcmp
strlen
fclose
fread
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ