DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
11869be3ef157544adcb5db7414bc8f4_JaffaCakes118.dll
Resource
win7-20240903-en
Target
11869be3ef157544adcb5db7414bc8f4_JaffaCakes118
Size
76KB
MD5
11869be3ef157544adcb5db7414bc8f4
SHA1
4b3a573e642f4225aee9e792f3440c6b7bc3c658
SHA256
ad54053a7a123da58fffa99a58b499d0089eca8a469958f2d6c0c414e3d28658
SHA512
20a9a5ab909f4f7e3114db857e46900ae8a879efa3cc6b23554732f2b3131999e76919392a765ddaf1b37657e818d37742bc4956c6417f057bcf4f8a9c1b1acf
SSDEEP
1536:QYl4QzOdUrChV5F8dXc+D2Kaxa5LfR6Rw/VJSBgn:QYl4QiQM9sVUw/P4
Checks for missing Authenticode signature.
resource |
---|
11869be3ef157544adcb5db7414bc8f4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
LoadLibraryA
FindNextFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
LocalFree
ExitProcess
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
RemoveDirectoryA
GetProcAddress
CreateThread
Process32Next
Process32First
Sleep
GetCurrentProcessId
CreateDirectoryA
MoveFileA
WideCharToMultiByte
WritePrivateProfileStringA
CreateProcessA
CloseHandle
DeleteFileA
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
GetCommandLineW
BuildExplicitAccessWithNameA
RegSetValueExA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
ftell
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
atoi
strncmp
strchr
strncpy
strcmp
_access
strcpy
strlen
_wcslwr
??3@YAXPAX@Z
sprintf
strstr
??2@YAPAXI@Z
memcpy
_purecall
memcmp
fclose
fread
memset
_strlwr
fseek
fopen
strcat
strrchr
wcsstr
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ