DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
10d5b9997af50bc1e51c58010b450c1e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
10d5b9997af50bc1e51c58010b450c1e_JaffaCakes118
Size
36KB
MD5
10d5b9997af50bc1e51c58010b450c1e
SHA1
6bf6f816c941cee040515cf0637a27448039c76d
SHA256
fb16123bc99363c0a48e8161224d60cf9ef0e31fe972b701c360361bfdef2904
SHA512
24c576602eda4520781936ec5d04d7058598ec06bd22f902b67947868eaa4f00fa2a4ef8c49b5b02d9fb8fe4a6dc986990bc86bbee9a5d1ed5befbd9e000fb64
SSDEEP
768:ea8j8zxxJW1gBK6zZrWINLUmM97ZmUOi:P8j8zTJWKKIAeDMfmUO
Checks for missing Authenticode signature.
resource |
---|
10d5b9997af50bc1e51c58010b450c1e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
MoveFileA
DeleteFileA
SetFileAttributesA
LeaveCriticalSection
EnterCriticalSection
FindNextFileA
FindFirstFileA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
GetCurrentProcessId
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
ExitProcess
LoadLibraryA
FreeLibrary
lstrlenA
MultiByteToWideChar
GetCommandLineW
lstrlenW
WideCharToMultiByte
CreateThread
FindWindowExA
SetWindowTextA
SendMessageA
IsWindow
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoCreateInstance
CoInitialize
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
_strlwr
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_purecall
memcpy
memcmp
strcpy
memset
strcat
strrchr
??2@YAPAXI@Z
strstr
sprintf
strlen
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ