DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
011941f0770120adbf4eaf62a38289bf_JaffaCakes118.dll
Resource
win7-20240903-en
Target
011941f0770120adbf4eaf62a38289bf_JaffaCakes118
Size
52KB
MD5
011941f0770120adbf4eaf62a38289bf
SHA1
a3a8012bab453c61acafe40218fb2ca079407f7b
SHA256
b133ba5cb332b8d29d5d2531c37cdd18b62915c520aac4a1d0bc14b680c91912
SHA512
783e72688053859f5dcc5063b1af542132c4a743d8fb4ce39257c17efbc13896bd38ffbe9216dd3f09fdf3facbf65c56bb63051588dd1a49b7ae2a7d2be08c39
SSDEEP
768:w2WppAInXZmEghIK7JTjqzn2aQoF3HyDXOp8cAhc/8WbdDSGMbTP+:OpAoJNcTjqn2DoF2O+ceu8WpDSZ3
Checks for missing Authenticode signature.
resource |
---|
011941f0770120adbf4eaf62a38289bf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetShortPathNameA
GetModuleHandleA
CreateThread
Process32Next
Process32First
LocalFree
GetCurrentProcessId
GetExitCodeProcess
MultiByteToWideChar
CreateDirectoryA
FreeLibrary
LoadLibraryA
GetProcAddress
GetCommandLineW
FindNextFileA
DeleteFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
MoveFileA
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
ExitProcess
Sleep
lstrlenW
WideCharToMultiByte
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
WritePrivateProfileStringA
CloseHandle
WaitForSingleObject
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryValueExA
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoCreateInstance
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
??2@YAPAXI@Z
_strupr
_strlwr
_adjust_fdiv
malloc
_initterm
free
atoi
fopen
fseek
ftell
fread
fclose
strcat
_access
_wcslwr
??3@YAXPAX@Z
sprintf
memset
strlen
strncpy
strchr
strncmp
strcpy
strstr
_stricmp
memcpy
_purecall
memcmp
strcmp
strrchr
wcsstr
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ