DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
07138067288ae27db55eb463834640d7_JaffaCakes118.dll
Resource
win7-20240729-en
Target
07138067288ae27db55eb463834640d7_JaffaCakes118
Size
68KB
MD5
07138067288ae27db55eb463834640d7
SHA1
69d757be96c3b2dbab1c0362474ef47b79a4534e
SHA256
a6ba5f316debdf7827973f38b2dd567b807f93ff4df743e82e493e08a2426ea5
SHA512
ff706bdac4ebf253472fbc1892aec9d2eb5509f5c2fb5ac18937b228bf0912424c08be298e6404ffc409bc465f2e0accf7e0474962bc42d0ae05dfc7c120b7be
SSDEEP
1536:e/W23mXpQhN+oERhqbKXQWW4sslYZZ/BDS:uhihnQW3MZ/BDS
Checks for missing Authenticode signature.
resource |
---|
07138067288ae27db55eb463834640d7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
Sleep
WritePrivateProfileStringA
LocalFree
CreateThread
CreateDirectoryA
GetCommandLineW
GetExitCodeProcess
WaitForSingleObject
Process32Next
Process32First
ExitProcess
WideCharToMultiByte
lstrlenA
lstrlenW
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
GetCurrentProcessId
FreeLibrary
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
GetProcAddress
LoadLibraryA
RemoveDirectoryA
GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
BuildExplicitAccessWithNameA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strcat
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strcmp
_wcslwr
wcsstr
_access
atoi
_purecall
strcpy
strncmp
strchr
??3@YAXPAX@Z
sprintf
strlen
fclose
fread
memset
??2@YAPAXI@Z
ftell
fseek
fopen
_strupr
strrchr
strstr
memcmp
memcpy
strncpy
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ