DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
37ad38f7c434aca01c0cd3bd437fe1f4_JaffaCakes118.dll
Resource
win7-20240708-en
Target
37ad38f7c434aca01c0cd3bd437fe1f4_JaffaCakes118
Size
56KB
MD5
37ad38f7c434aca01c0cd3bd437fe1f4
SHA1
a2cc67ecb7064a2492a9ff322fadb89ab3fffd3e
SHA256
519f332bc025d9f58302457b694d03d6554c2cd61b57b361c8735a8e47796be9
SHA512
4962760345cb0f7bf073460be71246e95ffdf6bb34dc655284c5d3a0b35c96ecf3d04d49c42e3b1be3d3dd082027991373dc9ace99eb90904e135fed579b0739
SSDEEP
768:+qby8SiRvrAlHippvnSXwXOhecrCBnMsvjZUViZmD9n0C9EVy9h2gj+S3X:7S8AdippvnS37CV+Zb39X6O
Checks for missing Authenticode signature.
resource |
---|
37ad38f7c434aca01c0cd3bd437fe1f4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
FindNextFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
CreateDirectoryA
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
CreateThread
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
CreateProcessA
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Process32Next
Process32First
GetExitCodeProcess
WaitForSingleObject
MoveFileA
LocalFree
GetCommandLineW
WritePrivateProfileStringA
Sleep
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetProcAddress
LoadLibraryA
FreeLibrary
ExitProcess
CloseHandle
DeleteFileA
InterlockedIncrement
RegCreateKeyExA
RegSetValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoGetInterfaceAndReleaseStream
CoInitialize
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoUninitialize
SysFreeString
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
fseek
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_purecall
_wcslwr
wcsstr
atoi
memcpy
_access
strcmp
strncmp
strchr
strncpy
strstr
memcmp
strcpy
??3@YAXPAX@Z
fclose
fread
memset
??2@YAPAXI@Z
ftell
_strupr
fopen
strcat
strrchr
sprintf
strlen
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ