DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fa90923f413d68c9807351c53305b930_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fa90923f413d68c9807351c53305b930_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fa90923f413d68c9807351c53305b930_JaffaCakes118
Size
48KB
MD5
fa90923f413d68c9807351c53305b930
SHA1
b9255d577ab52a7a8f1b337e541afc0dbc29a67e
SHA256
6a698ddcba33422847896a68db76f4a3106935a019a9a27a777a75f2e14320f3
SHA512
9ec20369c90784f74a8300accd445d595b8463f2fdf143022387493b2732dcb13c573cb2a61883dae3e1a03be91a897a131adf243da39788970e5c4fa7155e4d
SSDEEP
768:vbIHm/9NvJXaDMiJ3DaAQAV1RrCzal6z7RWr+JuQpZ7Ikw1O0yS9zZI/UpOrtDO1:vx9N1yBJzAAbRoa4fRcdogHNQtFOQTZ
Checks for missing Authenticode signature.
resource |
---|
fa90923f413d68c9807351c53305b930_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
Sleep
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
MoveFileA
CreateThread
ExitProcess
CreateDirectoryA
GetCommandLineW
LeaveCriticalSection
LocalFree
Process32Next
Process32First
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
RemoveDirectoryA
WritePrivateProfileStringA
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
FindNextFileA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
LoadLibraryA
FreeLibrary
GetSystemDirectoryA
GetModuleFileNameA
CloseHandle
CreateProcessA
EnterCriticalSection
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
strcpy
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_purecall
_access
fopen
fseek
ftell
??2@YAPAXI@Z
fread
fclose
strncmp
memset
sprintf
??3@YAXPAX@Z
memcmp
memcpy
wcsstr
_wcslwr
strstr
strlen
strcat
_strlwr
strrchr
atoi
strchr
strcmp
strncpy
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ