CheckSwizzor
GetPCleanVirusName
PolyCleanFile
PolyCleanFileEx
PolyCleanFileM
Static task
static1
Behavioral task
behavioral1
Sample
PClean.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
PClean.dll
Resource
win10v2004-20240802-en
Target
14563b9213ec29a9f7072fb3632d7066_JaffaCakes118
Size
193KB
MD5
14563b9213ec29a9f7072fb3632d7066
SHA1
8f3bc90931388468b4f7b8fab5181a5595670374
SHA256
b91e6081993efb7eee33c12a9f802962b7df51905c3fda72dd2b862fea0f8071
SHA512
0e59c3bb520b9980bff5bd4322dff3711c71589824ca9c927ee3bb1282cf5aaa479b3efebd04769f026b26be2eb298222f132621efb9be4bfa69e0dbc4dbb4a8
SSDEEP
6144:4fqQtyoMWVdWBOB59pFGPpMUYDL/KiT2wXxIvc4:4fZyZWX4eXOpMUYDawab
Checks for missing Authenticode signature.
resource |
---|
unpack001/PClean.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Process32Next
Process32First
CreateToolhelp32Snapshot
GetVersion
GetCurrentProcess
CopyFileA
DeleteFileA
Sleep
SetFileAttributesA
IsBadReadPtr
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetPrivateProfileStringA
GetDriveTypeA
GetLocalTime
FileTimeToSystemTime
OpenProcess
GetFileTime
FlushViewOfFile
MoveFileExA
WinExec
GetShortPathNameA
WritePrivateProfileStringA
GetWindowsDirectoryA
GetFileAttributesA
GetSystemDirectoryA
GetTempPathA
MoveFileA
QueryPerformanceCounter
CreateThread
GetCurrentThreadId
CreateDirectoryA
InterlockedExchange
TerminateProcess
GetLastError
CreateFileA
GetFileSize
CloseHandle
SetFilePointer
ReadFile
WriteFile
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FileTimeToLocalFileTime
FreeLibrary
RaiseException
GetOEMCP
GetACP
LCMapStringW
LCMapStringA
HeapFree
HeapAlloc
RtlUnwind
HeapReAlloc
GetFileType
SetEndOfFile
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
IsBadWritePtr
FlushFileBuffers
SetHandleCount
GetStdHandle
GetStartupInfoA
HeapSize
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetStdHandle
InterlockedDecrement
InterlockedIncrement
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
MessageBoxA
wsprintfA
SetEntriesInAclA
SetSecurityInfo
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
AllocateAndInitializeSid
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
SHDeleteValueA
PathRemoveExtensionA
PathFindFileNameA
PathRemoveFileSpecA
PathFileExistsA
CheckSwizzor
GetPCleanVirusName
PolyCleanFile
PolyCleanFileEx
PolyCleanFileM
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ