DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0652133775ead64733f48d7a639889c8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
0652133775ead64733f48d7a639889c8_JaffaCakes118
Size
44KB
MD5
0652133775ead64733f48d7a639889c8
SHA1
dd168d38dc94ce92c032d94f563734e0212caf73
SHA256
6453e6d1e6e9f50404005ed7bca7716688ac4f7e859ddef745a3479bf9e47f83
SHA512
984f50bf91e44ade17d131e5c150d741289edbca25100ef15a40200d1e74170956c9541bdf079dc872fefa4370ec697a2a2c6607e3ea1f16366b9b99b5c823b2
SSDEEP
768:eZaTF+H5xwYoRYPjvcqUd9/ZT7jiimyWbFTQYl3vA34p:eKUH5xwYom4qUf5iimymTpv24
Checks for missing Authenticode signature.
resource |
---|
0652133775ead64733f48d7a639889c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
CreateThread
GetCommandLineW
Sleep
LeaveCriticalSection
EnterCriticalSection
MoveFileA
DeleteFileA
SetFileAttributesA
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
FindNextFileA
FindFirstFileA
Process32Next
Process32First
GetCurrentProcessId
FreeLibrary
ExitProcess
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
WaitForSingleObject
CloseHandle
DisableThreadLibraryCalls
GetExitCodeProcess
SendMessageA
SetWindowTextA
IsWindow
FindWindowExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoInitialize
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
strlen
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strcat
??2@YAPAXI@Z
_purecall
memcpy
strstr
strcpy
strncmp
strchr
strncpy
strrchr
memset
sprintf
??3@YAXPAX@Z
memcmp
_strupr
wcsstr
_wcslwr
strcmp
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ