DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
30f6af5c30aba881e110b6061127de2c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30f6af5c30aba881e110b6061127de2c_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
30f6af5c30aba881e110b6061127de2c_JaffaCakes118
Size
52KB
MD5
30f6af5c30aba881e110b6061127de2c
SHA1
a334f89cdcf7b14b5d0bb3ceba546c6436eb16ff
SHA256
81be8511708fa07ba9c2c8dd833d123dfc3643cec47126a6fb9ed7f9c906ac04
SHA512
214a97613d3b3e31ec35fa6d9f4b751f3ab82e8d2545755403c09d78066216813eb3d884417729945a5d9abdc474903f21deef2e97898f7f84cdcf079d4df613
SSDEEP
1536:C8DOgQvr22b6FAegTWfWwKgHMUBOhVG1zCoK:iT22DWZMUI9oK
Checks for missing Authenticode signature.
resource |
---|
30f6af5c30aba881e110b6061127de2c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindFirstFileA
GetProcAddress
WideCharToMultiByte
lstrlenW
CreateDirectoryA
SetFileAttributesA
CreateThread
MoveFileA
GetExitCodeProcess
WaitForSingleObject
ExitProcess
GetPrivateProfileStringA
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetCurrentProcessId
WritePrivateProfileStringA
Process32Next
Process32First
GetCommandLineW
FindNextFileA
LocalFree
lstrlenA
MultiByteToWideChar
GetSystemDirectoryA
GetModuleFileNameA
CloseHandle
LoadLibraryA
FreeLibrary
Sleep
DeleteFileA
RemoveDirectoryA
CreateProcessA
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
RegDeleteKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
BuildExplicitAccessWithNameA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
strlen
_strupr
_strlwr
_adjust_fdiv
malloc
_initterm
free
_purecall
fopen
fseek
ftell
fread
fclose
strcmp
memcpy
memcmp
strstr
??3@YAXPAX@Z
strcat
strcpy
memset
_access
sprintf
strncpy
strchr
strncmp
_stricmp
atoi
??2@YAPAXI@Z
wcsstr
_wcslwr
strrchr
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ