DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
15ef6a45026d9e7f57fdc850aa5a5e37_JaffaCakes118.dll
Resource
win7-20240903-en
Target
15ef6a45026d9e7f57fdc850aa5a5e37_JaffaCakes118
Size
56KB
MD5
15ef6a45026d9e7f57fdc850aa5a5e37
SHA1
ce901ae5c7fed7cebb3572c252b05e22f65315f7
SHA256
9b20790af1f16075ec838191ac14e4fd882e358cc0aee3f37bf905ef76ee8fb2
SHA512
c9880ff615fc97b0ea6b5190b1247fd0ded83e7fd3e766b8ff528753fcdc654302caa4d940e55933a766e2fb20abb5797f867569778cc525d26b76f8b68a7939
SSDEEP
1536:Pab3ODLV7ah1UE568jlaVT75YX2fJXCIphlaLKE:SSDRaPbOYSCahlw
Checks for missing Authenticode signature.
resource |
---|
15ef6a45026d9e7f57fdc850aa5a5e37_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetExitCodeProcess
WaitForSingleObject
DeleteFileA
ExitProcess
WritePrivateProfileStringA
LeaveCriticalSection
EnterCriticalSection
LocalFree
FindNextFileA
SetFileAttributesA
GetPrivateProfileStringA
GetCommandLineW
CreateDirectoryA
MoveFileA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetCurrentProcessId
GetProcAddress
lstrlenW
WideCharToMultiByte
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
Sleep
lstrlenA
MultiByteToWideChar
CreateThread
LoadLibraryA
FreeLibrary
Process32First
Process32Next
CloseHandle
FindFirstFileA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoUninitialize
CoInitialize
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
memcpy
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_purecall
_access
_wcslwr
wcsstr
strncmp
strncpy
strcmp
strrchr
strcat
strcpy
??3@YAXPAX@Z
sprintf
strstr
??2@YAPAXI@Z
memset
strlen
atoi
strchr
memcmp
_strlwr
fclose
fread
ftell
fseek
fopen
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ