DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0d1cedfa4712a6d37be6da7af907ed2f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0d1cedfa4712a6d37be6da7af907ed2f_JaffaCakes118
Size
52KB
MD5
0d1cedfa4712a6d37be6da7af907ed2f
SHA1
850d15df684f08afef455a8e7f37450e83624ce0
SHA256
ce7b2089ace6b4e95f4ce62866ddde8ac0d3545aefe8b169f1d8525ceefee954
SHA512
3331f24ca09a91f6e7e383cf57f70a079a41b3e7a8471257588878bbc7900f79f120573e23e7a25107880931a21df4c97cff4cae9f805ba0953d688fa35f511c
SSDEEP
1536:o8eDFMng2BsTfkfIh9wjg31pX0iiqBeZH:oDFMYh9wa1pXVeZ
Checks for missing Authenticode signature.
resource |
---|
0d1cedfa4712a6d37be6da7af907ed2f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
lstrlenA
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
Sleep
GetCommandLineW
GetSystemDirectoryA
CreateThread
LoadLibraryA
Process32First
ExitProcess
GetExitCodeProcess
WaitForSingleObject
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
FreeLibrary
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
MultiByteToWideChar
MoveFileA
SetFileAttributesA
LocalFree
WritePrivateProfileStringA
lstrlenW
WideCharToMultiByte
CloseHandle
DeleteFileA
RemoveDirectoryA
CreateProcessA
GetCurrentProcessId
CreateDirectoryA
Process32Next
BuildExplicitAccessWithNameA
RegEnumKeyExA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegDeleteKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
memcpy
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
strcmp
atoi
_purecall
_wcslwr
wcsstr
fopen
fseek
ftell
??2@YAPAXI@Z
sprintf
??3@YAXPAX@Z
_access
strcat
strcpy
memset
strstr
strlen
strrchr
memcmp
_strupr
strncpy
strchr
strncmp
fclose
fread
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ