DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
10bdd1e4a41d555f1952bee8ecad5730_JaffaCakes118.dll
Resource
win7-20240903-en
Target
10bdd1e4a41d555f1952bee8ecad5730_JaffaCakes118
Size
44KB
MD5
10bdd1e4a41d555f1952bee8ecad5730
SHA1
1b7cb044ad3927e7ce517057bdc583d4a40f08ab
SHA256
7cc3c248de4c8f2c3e5bbd705a388f72ec14fecda02eb55ff648b983e269298a
SHA512
85233a45ee04ea302553ae13056b924b7b4273c0b312fa17daee22867b959a43e3916d96c106ef9ca4993fb8a7e34ca44112047e6201ca8ef79f4620f2938e2f
SSDEEP
768:02heu1fZM/D0k2ul7JQM3UOhq+FNUH4mI5Dk3O:5BUok2mKMEH0w4mIJk3
Checks for missing Authenticode signature.
resource |
---|
10bdd1e4a41d555f1952bee8ecad5730_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
GetModuleFileNameA
CloseHandle
Process32Next
Process32First
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
ExitProcess
CreateThread
MoveFileA
DeleteFileA
SetFileAttributesA
FindNextFileA
FindFirstFileA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
GetCommandLineW
GetCurrentProcessId
lstrlenA
MultiByteToWideChar
lstrlenW
FreeLibrary
LoadLibraryA
GetProcAddress
Sleep
SetWindowTextA
IsWindow
FindWindowExA
SendMessageA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoCreateInstance
CoInitialize
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strncmp
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strcat
strrchr
strcmp
_wcslwr
wcsstr
strstr
??2@YAPAXI@Z
_purecall
memcpy
memcmp
sprintf
strncpy
strchr
memset
_strupr
strlen
strcpy
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ