DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
044cac91b6aea0a30e7d70806996aacc_JaffaCakes118.dll
Resource
win7-20240903-en
Target
044cac91b6aea0a30e7d70806996aacc_JaffaCakes118
Size
48KB
MD5
044cac91b6aea0a30e7d70806996aacc
SHA1
6f10fea8fa3f39cc33cef174824bc4a13a0e7721
SHA256
bb18664f6c8edad3144e96b6aafbd60750a52500ed43b2b6a9e3ef7ed7ed1ea5
SHA512
0d4781dc26c332d5d95151ae97fd26b940c40a257abdb5c0a4b7d562cd38bf96a1f745f7bc56949725cd76da4287a767f4be6b9f41f2e8ba69a5e6b40ac4213e
SSDEEP
768:f5jGukFwnmLjZHNlOJFcQ5yqO3MeoqEL7XeWhz8VKr6kogB+gKmNe+d:fMdxxXnQ5O3U/Hesz1r6koXgRNe+d
Checks for missing Authenticode signature.
resource |
---|
044cac91b6aea0a30e7d70806996aacc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindNextFileA
DeleteFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
ExitProcess
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
lstrlenW
MoveFileA
CreateThread
GetCommandLineW
Sleep
WritePrivateProfileStringA
LocalFree
CreateProcessA
GetSystemDirectoryA
CreateDirectoryA
GetExitCodeProcess
WaitForSingleObject
GetCurrentProcessId
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
Process32First
CloseHandle
Process32Next
GetModuleHandleA
SetEntriesInAclA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
GetNamedSecurityInfoA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
sprintf
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
strncmp
strncpy
_access
??2@YAPAXI@Z
_purecall
strchr
atoi
??3@YAXPAX@Z
strcpy
strcmp
strrchr
memcmp
memset
strstr
_strlwr
strcat
strlen
memcpy
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ