DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f9d7fa42b095c492abc8f404dd0c1c0d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f9d7fa42b095c492abc8f404dd0c1c0d_JaffaCakes118
Size
52KB
MD5
f9d7fa42b095c492abc8f404dd0c1c0d
SHA1
b8f0b4ef425239b4f73562c59d07241d3fb6a90c
SHA256
177c324e08df5d66ae38f57101bb0185e8fc999910e5c5a8433c2b4c4e8b1c95
SHA512
89de664e037d8be9c377167ddfb6f039f620a81bbebc0038b8bdc6abe67950e1337213353301713cf0c7a71b53f8caf16b5b6f033975fa6371bbdbd560a54f0c
SSDEEP
768:GB7/kEZpYXf++YBNQlWMI1q3ZxfJMRkdGvT7OPariEUiWkHpmDyi09WSPJWBakYW:G+2Yv+7MWszJDK78IUiWtDyi0RgBq
Checks for missing Authenticode signature.
resource |
---|
f9d7fa42b095c492abc8f404dd0c1c0d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
GetExitCodeProcess
CloseHandle
WaitForSingleObject
GetSystemDirectoryA
GetCommandLineW
SetFileAttributesA
GetCurrentProcessId
DisableThreadLibraryCalls
InitializeCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Sleep
CreateDirectoryA
MoveFileA
ExitProcess
CreateThread
Process32Next
Process32First
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
DeleteFileA
RemoveDirectoryA
CreateProcessA
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
WritePrivateProfileStringA
LocalFree
DeleteCriticalSection
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegDeleteKeyA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoUninitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoInitialize
CoMarshalInterThreadInterfaceInStream
SysFreeString
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
memset
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_wcslwr
wcsstr
strcmp
atoi
strncmp
strchr
strncpy
??2@YAPAXI@Z
sprintf
memcmp
memcpy
??3@YAXPAX@Z
strcat
strcpy
_strupr
_access
strstr
strrchr
strlen
_purecall
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ