DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1133d3f4842a5a99e04610d16fab158d_JaffaCakes118.dll
Resource
win7-20240729-en
Target
1133d3f4842a5a99e04610d16fab158d_JaffaCakes118
Size
60KB
MD5
1133d3f4842a5a99e04610d16fab158d
SHA1
a8315331cbf3b1ad9a24d773bdd56af6747b4a7f
SHA256
73f83dd22ae00779114277d7ad07b8f1f9497eaec94376cf661a152e3e1918fb
SHA512
d0580d60118c981dca9f1e43ad7bc6b66424cea13c6bdd3cf3e38065c66f5e6233026eb58a3bca8fe0fb78083ec5e7055e75ec7e75f24cc9fa2d629427644239
SSDEEP
768:WkANfQ8MXQSlyt7rlq2F1yMUuibZqbVXy9tDzD49VOlj5HIqgQ5Qi/OEeiHy:WkCfGk/UxgtLOldxgQn/OEei
Checks for missing Authenticode signature.
resource |
---|
1133d3f4842a5a99e04610d16fab158d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
WideCharToMultiByte
lstrlenW
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringA
MoveFileA
CreateDirectoryA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
MultiByteToWideChar
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
LocalFree
CreateThread
GetCurrentProcessId
ExitProcess
LoadLibraryA
GetProcAddress
FreeLibrary
GetCommandLineW
Process32First
Process32Next
CloseHandle
SetFileAttributesA
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
GetModuleFileNameA
DeleteFileA
RemoveDirectoryA
Sleep
CreateProcessA
InterlockedDecrement
SetEntriesInAclA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
GetNamedSecurityInfoA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
strlen
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_purecall
memcpy
strncmp
strncpy
??3@YAXPAX@Z
strcat
strcpy
memset
sprintf
_access
strstr
??2@YAPAXI@Z
strcmp
strrchr
_stricmp
wcsstr
_wcslwr
memcmp
atoi
strchr
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ